Skip to content
OpenAdvisories
Medium · 6.9 CVE-2024-52064 EUVD-2024-46107GHSA-r83p-g228-gq84

Potential stack buffer write overflow in Connext applications while parsing malicious license file

Published Dec 13, 2024 · Updated Feb 7, 2025 · Assigned by RTI

Description

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.0.0 before 7.3.0.2, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.1.40, from 5.0.0 before 5.3.1.45.

Affected products

VendorProductAffectedFixed
RTI Connext Professional 7.0.0 – < 7.3.0.2, 6.1.0 – < 6.1.2.21, 6.0.0 – < 6.0.1.40, 4.4 – < 5.3.1.45 7.3.0.2

References