Lucene search

NICVELIST:CVE-2024-4080

HistoryJul 23, 2024 - 1:29 p.m.

CVE-2024-4080 Memory Corruption Due to Improper Length Checks in LabVIEW tdcore.dll

2024-07-2313:29:55

CWE-119

www.cve.org

cve-2024-4080

memory corruption

labview

tdcore.dll

improper length checks

information disclosure

arbitrary code execution

vulnerability

specially crafted vi

labview 2024 q1

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS4

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

ACTIVE

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N

EPSS

0.001

Percentile

22.3%

JSON

A memory corruption issue due to an improper length check in LabVIEW tdcore.dll may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "LabVIEW",
    "vendor": "NI",
    "versions": [
      {
        "lessThanOrEqual": "24.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

References

www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/memory-corruption-issues-due-to-improper-length-checks-in-labview.html

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS4

8.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

ACTIVE

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N

EPSS

0.001

Percentile

22.3%

JSON

Related for CVELIST:CVE-2024-4080