49 matches found
CVE-2024-10496
CVE-2024-10496 concerns NI LabVIEW, where an out-of-bounds read arises from improper input validation in the function BuildFontMap (fontmgr.cpp). Affected product/version: LabVIEW 2024 Q3 and earlier. Impact stated in sources: disclosure of information or arbitrary code execution if a user opens ...
CVE-2024-10494
CVE-2024-10494 affects NI LabVIEW prior to or including 2024 Q3. Root cause: an out-of-bounds read in HeapObjMapImpl.cpp due to improper input validation, which may disclose information or allow arbitrary code execution when a user opens a specially crafted VI. Impact is limited to affected LabVI...
CVE-2017-2779
The CVE-2017-2779 vulnerability affects National Instruments LabVIEW (LabVIEW 2016, 2017, 2015, 2014) where the RSRC segment parsing can be manipulated. In LabVIEW’s RSRC handling, the loop counter and offsets from the RSRC data can be controlled by an attacker via a specially crafted VI file. Th...
CVE-2024-10495
CVE-2024-10495 concerns an out-of-bounds read in NI LabVIEW’s font loading: fontmgr.cpp font table loading can disclose information or allow arbitrary code execution. Exploitation requires a user to open a specially crafted VI, affecting LabVIEW 2024 Q3 and earlier. Connected sources also referen...
CVE-2024-23608
CVE-2024-23608 is an out-of-bounds write in NI LabVIEW caused by a missing bounds check. The issue enables remote code execution when a user is provided with a specially crafted VI, per the vulnerability description and multiple sources. Affected are LabVIEW 2024 Q1 and earlier versions. Several ...
CVE-2024-23611
CVE-2024-23611 is an out-of-bounds write in National Instruments LabVIEW caused by a missing bounds check, leading to remote code execution on affected installations (LabVIEW 2024 Q1 and earlier). Exploitation requires a user to receive a specially crafted VI; the attacker must entice the user to...
CVE-2024-23610
CVE-2024-23610 is an out-of-bounds write in National Instruments LabVIEW caused by a missing bounds check in VI parsing, enabling remote code execution. Affected: LabVIEW 2024 Q1 and earlier versions. The exploit requires a user to run a specially crafted VI (per ZDI/NI advisories). Impact: poten...
CVE-2025-2630
CVE-2025-2630 is a DLL hijacking vulnerability in NI LabVIEW caused by an uncontrolled search path. The issue affects NI LabVIEW 2025 Q1 and earlier versions; exploitation requires an attacker to drop a malicious DLL into the uncontrolled search path, potentially enabling arbitrary code execution...
CVE-2013-5022
The CVE-2013-5022 entry concerns an Absolute path traversal via the CWGraph3D ActiveX control (cw3dgrph.ocx) in National Instruments LabWindows/CVI 2012 SP1 and earlier, LabVIEW 2012 SP1 and earlier, and other products. Root cause: the ExportStyle method accepts a full pathname and, when combined...
CVE-2024-23612
NI LabVIEW CVE-2024-23612 is an improper error handling vulnerability affecting LabVIEW 2024 Q1 and earlier. Public docs confirm that exploitation requires a user to open or be presented with a specially crafted VI, potentially enabling remote code execution. Related disclosures (ZDI) describe an...
CVE-2022-27237
CVE-2022-27237 describes a cross-site scripting (XSS) vulnerability in an NI Web Server component used with several NI products. The advisory indicates the affected surface is the NI Web Server component across multiple NI product deployments, with remediation guidance requiring upgrading to one ...
CVE-2013-5021
The CVE-2013-5021 issue affects multiple National Instruments CWUI ActiveX controls (CWNumEdit, CWGraph, CWBoolean, CWSlide, CWKnob) used in NI LabWindows/CVI 2012 SP1 and earlier, LabVIEW 2012 SP1 and earlier, and ABB DataManager Data Analysis. A root cause in the ExportStyle() method enables ab...
CVE-2024-4079
CVE-2024-4079 Details: NI LabVIEW contains an out-of-bounds read due to a missing bounds check in LabVIEW, potentially disclosing info or enabling arbitrary code execution. Exploitation requires a user to open a specially crafted VI and is limited to local attack paths. Affected: LabVIEW 2024 Q1 ...
CVE-2025-2632
CVE-2025-2632 : NI LabVIEW (2025 Q1 and earlier) is affected by an out-of-bounds write caused by improper bounds checking when reading CPU information from cache. This can lead to information disclosure or arbitrary code execution. Exploitation requires a user to open a specially crafted VI. The ...
CVE-2017-2775
CVE-2017-2775 is a memory corruption flaw in NI LabVIEW’s LvVariantUnflatten handling affecting 64-bit LabVIEW 2015 before SP1 f7 and 2016 before f2. A specially crafted VI file can drive an attacker-controlled value as a loop terminator, triggering heap corruption via LV’s ReadTD/BinDataReader p...
CVE-2024-23609
CVE-2024-23609 is an improper error handling vulnerability in NI LabVIEW affecting 2024 Q1 and earlier. A remote code execution risk exists if a user opens a specially crafted VI, as described in the initial report. The exact root cause is unspecified beyond improper error handling; no patch/vers...
CVE-2025-2631
NI LabVIEW up to 2025 Q1 is affected by an out-of-bounds write in InitCPUInformation() due to improper bounds checking. This can lead to information disclosure or arbitrary code execution. Exploitation requires a user to open a specially crafted VI (local vector, user interaction needed). Affecte...
CVE-2024-4080
CVE-2024-4080 is a memory corruption vulnerability in LabVIEW tdcore.dll (affecting LabVIEW 2024 Q1 and earlier). The root cause is an improper length check in tdcore.dll, which could disclose information or allow arbitrary code execution when a user opens a specially crafted VI. Exploitation req...
CVE-2026-32861
The CVE-2026-32861 entry describes a memory corruption via an out-of-bounds write when NI LabVIEW loads a corrupted LVCLASS file. It affects NI LabVIEW up to and including 2026 Q1 (26.1.0) and earlier versions. The vulnerability may enable information disclosure or arbitrary code execution. Explo...
CVE-2024-4081
CVE-2024-4081 is a memory corruption vulnerability in NI LabVIEW caused by an improper length check in the LabVIEW component (tdcore_24_1.dll is implicated in related CVEs). Affects NI LabVIEW 2024 Q1 and earlier versions. Exploitation requires a user to open a specially crafted VI (local attack ...
CVE-2013-5023
The vulnerability CVE-2013-5023 affects NI software (e.g., LabWindows/CVI 2012 SP1 and earlier, LabVIEW 2012 SP1 and earlier) where ActiveX controls in the HelpAsst component of NI Help Links can be triggered to display local CHM files, enabling remote denial of service. The underlying issue is e...
CVE-2025-2629
CVE-2025-2629 is a DLL hijacking vulnerability in NI LabVIEW when loading the NI Error Reporting module. The flaw arises from an uncontrolled search path, allowing an attacker to place a malicious DLL that could be loaded, potentially enabling arbitrary code execution. Affected: NI LabVIEW 2025 Q...
CVE-2026-32860
The CVE-2026-32860 entry documents a memory corruption vulnerability in NI LabVIEW caused by an out-of-bounds write when loading a corrupted LVLIB file. The flaw may lead to information disclosure or arbitrary code execution. Successful exploitation requires a user to open a specially crafted .lv...
CVE-2025-64463
NI LabVIEW is affected by CVE-2025-64463: an out-of-bounds read in LVResource::DetachResource() when parsing a corrupted VI file. Affected: LabVIEW 2025 Q3 (25.3) and earlier. Impact per sources: information disclosure or arbitrary code execution if a user opens a crafted VI; exploit requires use...
CVE-2024-6638
CVE-2024-6638 affects LabVIEW 2024 Q1 and earlier versions. The issue is an integer overflow in the TDMS file reader caused by improper input validation, which can lead to an infinite loop. Exploitation requires a user to open a specially crafted TDMS file and is a local, user-interaction-based v...
CVE-2025-7361
CVE-2025-7361 affects NI LabVIEW 32-bit up to and including 2025 Q1. The issue is a code injection vulnerability caused by an improper initialization check in CIN nodes, which could allow arbitrary code execution if a user opens a specially crafted VI. LabVIEW 64-bit is not affected because CIN n...
CVE-2026-32864
CVE-2026-32864 affects NI LabVIEW (2026 Q1, 26.1.0 and earlier). The vulnerability is a memory corruption due to an out-of-bounds read in mgcore_SH_25_3!aligned_free(), potentially leading to information disclosure or arbitrary code execution. Exploitation requires the user to open a specially cr...
CVE-2025-7849
CVE-2025-7849: NI LabVIEW memory corruption due to improper error handling when a VILinkObj is null. Affects LabVIEW 2025 Q1 and earlier. Requires user to open a crafted VI for exploitation; locally exploitable with user interaction. Remediation: update to a version later than 2025 Q1 (per adviso...
CVE-2026-32863
NI LabVIEW (2026 Q1 26.1.0 and earlier) contains a memory corruption vulnerability due to an out-of-bounds read in sentry_transaction_context_set_operation(). This may lead to information disclosure or arbitrary code execution. Exploitation requires a user to open a specially crafted VI file, ind...
CVE-2025-2634
CVE-2025-2634 describes an out-of-bounds read in NI LabVIEW, specifically the fontmgr component, caused by improper bounds checking. The vulnerability may disclose information or allow arbitrary code execution. Exploitation requires a user to open a specially crafted VI, indicating a user-assiste...
CVE-2025-64461
NI LabVIEW is affected by an out-of-bounds write in mgocre_SH_25_3!RevBL() when opening a corrupted VI file, impacting 2025 Q3 (25.3) and earlier. Exploitation requires a user to open a crafted VI and can lead to information disclosure or arbitrary code execution. A patch/update to a version late...
CVE-2025-2633
NI LabVIEW is affected by CVE-2025-2633 due to an out-of-bounds read in the lvre!UDecStrToNum path, caused by improper bounds checking. This can lead to information disclosure or arbitrary code execution when a user opens a specially crafted VI. Affected products include LabVIEW 2025 Q1 and earli...
CVE-2025-7848
NI LabVIEW is affected by CVE-2025-7848 due to a memory corruption issue in the lvpict.cpp file caused by improper input validation. Affected products include LabVIEW 2025 Q1 and earlier versions. Exploitation requires a user to open a specially crafted VI, potentially enabling arbitrary code exe...
CVE-2025-64468
CVE-2025-64468 describes a use-after-free in NI LabVIEW’s sentry!sentry_span_set_data() when parsing a corrupted VI file. This could lead to information disclosure or arbitrary code execution. Exploitation requires a user to open a specially crafted VI file, and affects LabVIEW 2025 Q3 (25.3) and...
CVE-2025-64469
NI LabVIEW is affected by a stack-based buffer overflow in LVResFile::FindRsrcListEntry() when opening a corrupted VI file. The vulnerability may allow information disclosure or arbitrary code execution. Exploitation requires a user to open a specially crafted VI (local, with user interaction). A...
CVE-2025-64462
CVE-2025-64462 affects NI LabVIEW up to 2025 Q3 (25.3) and earlier. The vulnerability is an out-of-bounds read in LVResFile::RGetMemFileHandle() triggered while parsing a corrupted VI file, potentially leading to information disclosure or arbitrary code execution. Exploitation requires a user to ...
CVE-2025-64464
NI LabVIEW is affected by an out-of-bounds read in lvre!VisaWriteFromFile() when parsing a corrupted VI file. Successful exploitation may disclose information or allow arbitrary code execution; exploitation requires a user to open a crafted VI. Impact described for LabVIEW 2025 Q3 (25.3) and earl...
CVE-2025-64465
CVE-2025-64465 is an out-of-bounds read in NI LabVIEW’s lvre!DataSizeTDR() when parsing a corrupted VI file. Affected: NI LabVIEW 2025 Q3 (25.3) and earlier. Impact: information disclosure or arbitrary code execution if a user opens a specially crafted VI. Exploitation condition: user interaction...
CVE-2026-32862
NI LabVIEW contains a memory corruption vulnerability (CVE-2026-32862) caused by an out-of-bounds write in ResFileFactory::InitResourceMgr(). The issue can lead to information disclosure or arbitrary code execution and requires a user to open a specially crafted VI file. Affected products: NI Lab...
CVE-2025-64466
CVE-2025-64466 is an out-of-bounds read in NI LabVIEW’s lvre!ExecPostedProcRecPost() triggered while parsing a corrupted VI file. Affects LabVIEW 2025 Q3 (25.3) and earlier. Impact stated: information disclosure or arbitrary code execution; exploitation requires a user to open a specially crafted...
CVE-2026-16233
CVE-2026-16233 is an out-of-bounds write memory corruption vulnerability in NI LabVIEW triggered when loading a specially crafted VI file. Successful exploitation requires local access and user interaction (opening the malicious VI), but no prior privileges. The impact ranges from information dis...
CVE-2026-64203
CVE-2026-64203 is a memory corruption vulnerability (specifically an out-of-bounds read ) in NI LabVIEW triggered when loading a VI. Successful exploitation requires an attacker to get a user to open a specially crafted VI , which may lead to information disclosure or arbitrary code execution . T...
CVE-2026-16234
CVE-2026-16234 is a memory corruption vulnerability — specifically an Out-of-Bounds Read — in NI LabVIEW triggered when loading a specially crafted VI. Successful exploitation requires user interaction (opening the malicious file), with no prior privileges needed. The flaw can lead to information...
CVE-2026-64204
NI LabVIEW contains an out-of-bounds write vulnerability triggered when loading a specially crafted VI (Virtual Instrument). This memory corruption can lead to information disclosure or arbitrary code execution . Affected versions are NI LabVIEW 2026 Q3 (26.3.0) and prior . Exploitation requires ...
CVE-2026-64201
CVE-2026-64201 is a memory corruption vulnerability, specifically an out-of-bounds read , in NI LabVIEW versions 2026 Q3 (26.3.0) and prior. The flaw is triggered when a user opens or loads a specially crafted VI file , which can lead to information disclosure or arbitrary code execution . The at...
CVE-2026-64202
CVE-2026-64202 is an out-of-bounds read memory corruption vulnerability in NI LabVIEW triggered when loading a VI (Virtual Instrument) file. Successful exploitation requires a user to open a specially crafted VI , making it a local attack with required user interaction. The impact ranges from inf...
CVE-2026-18445
NI LabVIEW 2026 Q3 and prior versions are affected by an integer overflow leading to an out-of-bounds write . Successful exploitation requires a user to open a specially crafted VI file , resulting in potential information disclosure or arbitrary code execution . NVD rates it 7.8 (High) ; the CNA...
CVE-2026-18444
CVE-2026-18444 is an integer conversion vulnerability in NI LabVIEW that triggers an out-of-bounds read when loading images. Successful exploitation requires an attacker to convince a user to open a specially crafted VI file , making it a local attack with user interaction required and no privile...