NI LabVIEW 安全漏洞

NI LabVIEW National Instruments LabVIEW is a graphical program compilation platform from National Instruments NI. A security vulnerability exists in NI LabVIEW version 2025 Q3 and prior versions that originates from an out-of-bounds read when parsing a corrupted VI file, which could lead to...

PT-2025-52232

Name of the Vulnerable Software and Affected Versions NI LabVIEW versions prior to 25.3 Description An out of bounds read issue exists in NI LabVIEW within the LVResFile::RGetMemFileHandle function when processing a damaged VI file. Exploitation of this issue could lead to information disclosure ...

PT-2025-52228

Name of the Vulnerable Software and Affected Versions NI LabVIEW versions prior to 25.3 Description An out of bounds write issue exists in NI LabVIEW within the RevBL function when processing a damaged VI file. This can lead to information disclosure or arbitrary code execution if an attacker...

EUVD-2017-11922

Malware in sbrugna...

CVE-2025-7849

A memory corruption vulnerability due to improper error handling when a VILinkObj is null exists in NI LabVIEW that may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q1 and...

PT-2024-16317 · National Instruments · Ni Labview

Name of the Vulnerable Software and Affected Versions: NI LabVIEW versions prior to 2024 Q3 Description: An out of bounds read due to improper input validation when loading the font table in fontmgr.cpp may disclose information or result in arbitrary code execution. Successful exploitation requir...

The vulnerability of the tdcore_24_1.dll library in the LabVIEW programming environment allows a perpetrator to gain unauthorized access to protected information or execute arbitrary code.

The vulnerability of the tdcore241.dll library in the LabVIEW programming environment is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or execute arbitrary code using a...

PT-2024-5246 · National Instruments · Labview

Name of the Vulnerable Software and Affected Versions: LabVIEW versions prior to 2024 Q1 Description: The issue is related to an out of bounds read due to a missing bounds check in LabVIEW, which may disclose information or result in arbitrary code execution. Successful exploitation requires an...

CVE-2024-23611

An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions...

CVE-2024-23612

An improper error handling vulnerability in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions...

CVE-2024-23608

An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions...

PT-2024-19963 · National Instruments · Labview

Name of the Vulnerable Software and Affected Versions: LabVIEW versions prior to 2024 Q1 Description: An improper error handling issue may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. Recommendations: For versions pri...

CVE-2017-2779

An exploitable memory corruption vulnerability exists in the RSRC segment parsing functionality of LabVIEW 2017, LabVIEW 2016, LabVIEW 2015, and LabVIEW 2014. A specially crafted Virtual Instrument VI file can cause an attacker controlled looping condition resulting in an arbitrary null write. An...

National Instruments LabVIEW Memory Disclosure Vulnerability

National Instruments LabVIEW is a system design and development platform released by National Instruments. A memory disclosure vulnerability exists in National Instruments LabVIEW. An attacker could exploit this vulnerability by submitting a specially crafted VI file to an affected system to...