CVE-2024-52061: high-severity vulnerability in RTI Connext Professional
Potential stack buffer overflow when parsing an XML type
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.3epss 0.5%
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries, Queuing Service, Recording Service, Routing Service) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.4.0 before 7.5.0, from 7.0.0 before 7.3.0.5, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.1.40, from 5.0.0 before 5.3.1.45.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
RTI · Connext ProfessionalRelated CVEs — RTI Connext Professional
In the same product, most dangerous first.
CVE-2021-38487HIGHPotential Network Amplification and Information Exposure in RTI Connext Professional and Connext MicroEPSS 3.4%CVE-2024-52058HIGHPotential arbitrary command execution in System Designer while parsing malicious HTTP/REST requestsEPSS 0.6%CVE-2026-18460MEDIUMOff-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.EPSS 0.4%CVE-2026-18459HIGHIncorrect Calculation vulnerability in RTI Connext Professional (Core Libraries) allows Abuse Existing Functionality.EPSS 0.4%CVE-2026-18457HIGHHeap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.EPSS 0.4%CVE-2024-52057CRITICALPotential arbitrary SQL query execution in Queuing Service while parsing malicious remote commands or configuration filesEPSS 0.4%