CVEvulnerability

CVE-2026-11389

6.8 MEDIUM Published 2026-09-22 Modified 2026-09-22 Official page ↗
Status
Awaiting Analysis
Published
2026-09-22
Last modified
2026-09-22
Assigner
3f572a00-62e2-4423-959a-7ea25eff1638
CVSS 4.0 (3f572a00-62e2-4423-959a-7ea25eff1638)
6.8 MEDIUM — CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weaknesses
CWE-125, CWE-685, CWE-843

Description

Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.3.0 before 7.3.1.6.

Related

Weakness · CWE (3)

  • CWE-125 Out-of-bounds Read weakness
  • CWE-685 Function Call With Incorrect Number of Arguments weakness
  • CWE-843 Access of Resource Using Incompatible Type weakness

References