7 matches found
CVE-2025-30420
NI Circuit Design Suite is affected by CVE-2025-30420 due to an out-of-bounds read in Bitmap::InternalDraw() when SymbolEditor is used. A memory corruption vulnerability can lead to information disclosure or arbitrary code execution if a user opens a specially crafted .sym file. Affected version:...
CVE-2025-30417
CVE-2025-30417 affects NI Circuit Design Suite, due to an out-of-bounds write in function Library!DecodeBase64() used by the SymbolEditor. This memory corruption may lead to information disclosure or arbitrary code execution. Exploitation requires convincing a user to open a specially crafted .sy...
CVE-2025-30418
CVE-2025-30418 involves a memory corruption via an out-of-bounds write in CheckPins() inside NI Circuit Design Suite’s SymbolEditor. The issue can lead to information disclosure or arbitrary code execution, exploitable if a user opens a specially crafted .sym file. Affected: NI Circuit Design Sui...
CVE-2025-30419
CVE-2025-30419 describes a memory corruption via an out-of-bounds read in GetSymbolBorderRectSize() in NI Circuit Design Suite (SymbolEditor). Affected: NI Circuit Design Suite 14.3.0 and earlier. Impact: information disclosure or arbitrary code execution if a user opens a specially crafted .sym ...
CVE-2025-30421
The CVE-2025-30421 entry describes a memory corruption vulnerability in NI Circuit Design Suite caused by a stack-based buffer overflow in DrObjectStorage::XML_Serialize() when the SymbolEditor is used. Affected versions are 14.3.0 and earlier. Successful exploitation requires a user to open a sp...
CVE-2025-6034
CVE-2025-6034 affects NI Circuit Design Suite (SymbolEditor) where a memory corruption occurs due to an out-of-bounds read in DefaultFontOptions(). The vulnerability may lead to information disclosure or arbitrary code execution. Exploitation requires the user to open a specially crafted .sym fil...
CVE-2025-6033
The CVE-2025-6033 entry concerns NI Circuit Design Suite. A memory corruption due to an out-of-bounds write in XML_Serialize() when using the SymbolEditor can lead to information disclosure or arbitrary code execution. Exploitation requires a user to open a specially crafted .sym file, and affect...