Skip to content
OpenAdvisories
High · 8.3 CVE-2024-52061 EUVD-2024-46104GHSA-8cvv-3p2p-xx9w

Potential stack buffer overflow when parsing an XML type

Published Dec 13, 2024 · Updated Feb 7, 2025 · Assigned by RTI

Description

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries, Queuing Service, Recording Service, Routing Service) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.5, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.1.40, from 5.0.0 before 5.3.1.45.

Affected products

VendorProductAffectedFixed
RTI Connext Professional 7.4.0 – < 7.5.0, 7.0.0 – < 7.3.0.5, 6.1.0 – < 6.1.2.21, 6.0.0 – < 6.0.1.40, 5.0.0 – < 5.3.1.45 7.5.0

References