CVE-2026-30802: Out-of-bounds Read vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers.

Synopsis

An out-of-bounds read vulnerability exists in the Core Libraries of RTI Connext Micro, a middleware library used in embedded and real-time systems. The flaw is reachable over the network with no authentication required, meaning any network-accessible instance running a version between 4.0.0 and 4.3.0 is exposed. Successful exploitation allows an attacker to read memory beyond the intended buffer boundaries and crash the affected service. A patched-image rebuild at version 4.3.0 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The vulnerable service must be reachable over the network; an attacker sends specially crafted input to the exposed endpoint without any need for a foothold on the host.

• AuthenticationNot required

  No credentials or session token are needed; the attacker can interact with the service as an unauthenticated party.

• Victim interactionNot required

  No user or operator action is required to trigger the vulnerability; the attacker drives the entire exploit remotely.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and does not depend on race conditions, memory layout randomization, or other environmental preconditions.

Blast Radius

• An attacker reads memory contents beyond the intended buffer boundary, which exposes fragments of in-process data such as message payloads or internal state.
• Confidentiality impact is partial (VC:L): the attacker gains limited read access to memory but does not obtain full control over what is disclosed.
• The affected service crashes due to the invalid memory access (VA:H), causing a denial of service for any system or device depending on the Connext Micro middleware.
• Data integrity and downstream systems are not affected by this exploit path based on the published CVSS vector.