CVE-2025-1255
BaseFortify
Publication date: 2025-09-23
Last updated on: 2025-10-02
Assigner: RTI
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| rti | connext_professional | From 7.2.0 (inc) to 7.3.0.9 (exc) |
| rti | connext_professional | From 7.4.0 (inc) to 7.6.0 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-822 | The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an Untrusted Pointer Dereference issue in RTI Connext Professional (Core Libraries) that allows pointer manipulation. It affects versions from 7.4.0 before 7.6.0 and from 7.2.0 before 7.3.0.9. Essentially, the software improperly handles pointers, which can lead to unexpected behavior or exploitation.
How can this vulnerability impact me? :
The vulnerability has a high severity score (CVSS 8.3) and can be exploited remotely without user interaction or privileges. It can lead to high impact on confidentiality and availability, meaning attackers could manipulate pointers to cause crashes, data corruption, or unauthorized data access, potentially disrupting services or compromising sensitive information.