CVE-2025-1254
published 2025-05-08CVE-2025-1254: Out-of-bounds Read, Out-of-bounds Write vulnerability in RTI Connext Professional (Recording Service) allows Overflow Buffers, Overread Buffers.This issue…
PriorityP342high7.4CVSS 3.1
AVNACHPRNUINSUCNIHAH
EPSS
0.21%
11.1th percentile
Out-of-bounds Read, Out-of-bounds Write vulnerability in RTI Connext Professional (Recording Service) allows Overflow Buffers, Overread Buffers.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.7, from 6.1.0 before 6.1.2.23, from 6.0.0 before 6.0.1.42.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| rti | connext_professional | >= 6.0.0 < 6.0.1.42 | 6.0.1.42 |
| rti | connext_professional | 6.0.0 – 6.0.1.40 | — |
| rti | connext_professional | >= 6.1.0 < 6.1.2.23 | 6.1.2.23 |
| rti | connext_professional | >= 7.0.0 < 7.3.0.7 | 7.3.0.7 |
| rti | connext_professional | >= 7.4.0 < 7.5.0 | 7.5.0 |
CVSS provenance
nvdv3.17.4HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
nvdv4.07.7HIGHCVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
ImageMagick's failure to limit the depth of SVG file reads caused a DoS attack
ghsa·2025-12-30
CVE-2025-68618 [MEDIUM] CWE-674 ImageMagick's failure to limit the depth of SVG file reads caused a DoS attack
ImageMagick's failure to limit the depth of SVG file reads caused a DoS attack
### Summary
Using Magick to read a malicious SVG file resulted in a DoS attack.
### Details
bt obtained using gdb:
```
#4 0x0000555555794c9c in ResizeMagickMemory (memory=0x7fffee203800, size=391344) at MagickCore/memory.c:1443
#5 0x0000555555794e5a in ResizeQuantumMemory (memory=0x7fffee203800, count=48918, quantum=8)
at MagickCore/memory.c:1508
#6 0x0000555555acc8ed in SVGStartElement (context=0x517000000080, name=0x5190000055e3 "g", attributes=0x0)
at coders/svg.c:1254
#7 0x00007ffff6799b1c in xmlParseStartTag () at /lib/x86_64-linux-gnu/libxml2.so.2
#8 0x00007ffff68c7bb8 in () at /lib/x86_64-linux-gnu/libxml2.so.2
#9 0x00007ffff67a03f1 in xmlParseChunk () at /lib/x86_64-linux-gnu/libxml2.so.2
```
This
GHSA
GHSA-qmpq-8rmr-c5hm: Out-of-bounds Read, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers, Overflow Buffers
ghsa_unreviewed·2025-05-08
CVE-2025-1254 [HIGH] CWE-125 GHSA-qmpq-8rmr-c5hm: Out-of-bounds Read, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers, Overflow Buffers
Out-of-bounds Read, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers, Overflow Buffers.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.7, from 6.0.0 before 6.1.2.23.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-05-08
Published