CVE-2025-1252

HighCVSS 7.1/10Last modified Sep 22, 2026

Description

Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags. This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.7, from 6.1.0 before 6.1.2.23, from 6.0.0 before 6.0.1.42, from 5.3.0 before 5.3.*, from 5.2.0 before 5.2.*, from 4.4d before 5.1.*.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-122CWE-787

Affected software

VendorProductVersions
RTIConnext Professional>= 7.4.0, < 7.5.0; >= 7.0.0, < 7.3.0.7; >= 6.1.0, < 6.1.2.23; >= 6.0.0, < 6.0.1.42; >= 5.3.0, < 5.3.*; >= 5.2.0, < 5.2.*; >= 4.4d, < 5.1.*

References

Timeline

Published
May 8, 2025
Last modified
Sep 22, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-125204.0The WP Airbnb Review Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and CVE-2025-125215.3The Analytify Pro plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.0.3 via the ACVE-2025-125236.5Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated userCVE-2025-125245.4The Post Type Switcher plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4.0.0 due toCVE-2025-125255.3The Locker Content plugin for WordPress is vulnerable to Sensitive Information Exposure in version 1.0.0 via the 'lockerco_submit_post' AJAXCVE-2025-125264.3The Private Google Calendars plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on thCVE-2025-125274.3The Page & Post Notes plugin for WordPress is vulnerable to unauthorized modification of notes due to a missing capability check on the 'yydCVE-2025-125288.1The Pie Forms for WP plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.6 via the format_clCVE-2025-125298.8The Cost Calculator Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deCVE-2025-12537.8Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Stack-based Buffer Overflow vulnerability in RTI Connext ProfessionaCVE-2025-125305.9IBM watsonx.data intelligence 5.2.2, 5.3.0, 5.3.1, 5.3.1 through Patch 1 transmits data in clear text that could allow an attacker to obtainCVE-2025-125319.1IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to an XML external entity injection (XXE) attack when processing X
CVE-2025-1252: High severity, CVSS 7.1 | Vulnix