CVE-2026-11389

EUVD-2026-84611
Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers. This issue affects Connext Professional: from 7.4.0 before 7.7.0.1, from 7.3.0 before 7.3.1.6.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
RTICNA
6.8 MEDIUM
LOCAL
LOW
LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
rticonnext_professional
7.4.0 ≤
𝑥
< 7.7.0.1
CNA
rticonnext_professional
7.3.0 ≤
𝑥
< 7.3.1.6
CNA
Common Weakness Enumeration
References
https://www.rti.com/vulnerabilities/#cve-2026-11389