CVE-2026-3894
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
An out-of-bounds read vulnerability in RTI Connext Professional Core Libraries allows buffer overread. This affects versions from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.3, from 6.1.0 before 6.1.*, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*, and from 5.0.0 before 5.2.*.
Risk Assessment
The risk involves potential leakage of sensitive data or system destabilization due to reading memory beyond the allocated buffer. This could lead to data integrity breaches or application disruption.
Recommendation
Immediately upgrade to version 7.7.0, 7.3.1.3, or later, depending on the branch in use. Check for patches for older versions and apply them promptly.
Original NVD description (English source)
Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.3, from 6.1.0 before 6.1.*, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*, from 5.0.0 before 5.2.*.