Ni Labview vulnerabilities, page 2

50 vulnerabilities

Known vulnerabilities in Ni Labview, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.5HighCVE-2025-64469ni · labviewStack-based Buffer Overflow in LVResource::DetachResource() in NI LabVIEWThere is a stack-based buffer overflow vulnerability in NI LabVIEW in LVResFile::FindRsrcListEntry() when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q3 (25.3) and prior versions.EPSS0.16%8.7HighCVE-2025-12097ni · labviewRelative Path Traversal Vulnerability in NI System Web ServerThere is a relative path traversal vulnerability in the NI System Web Server that may result in information disclosure.  Successful exploitation requires an attacker to send a specially crafted request to the NI System Web Server, allowing the attacker to read arbitrary files.  This vulnerability existed in the NI System Web Server 2012 and prior versions.  It was fixed in 2013.EPSS0.62%6.1MediumCVE-2022-27237ni · flexlogger +4 moreni flexloggerThere is a cross-site scripting (XSS) vulnerability in an NI Web Server component installed with several NI products. Depending on the product(s) in use, remediation guidance includes: install SystemLink version 2021 R3 or later, install FlexLogger 2022 Q2 or later, install LabVIEW 2021 SP1, install G Web Development 2022 R1 or later, or install Static Test Software Suite version 1.2 or later.EPSS0.56%7.8HighCVE-2017-2779national instruments · labview 2016 +1 morenational instruments labview 2016An exploitable memory corruption vulnerability exists in the RSRC segment parsing functionality of LabVIEW 2017, LabVIEW 2016, LabVIEW 2015, and LabVIEW 2014. A specially crafted Virtual Instrument (VI) file can cause an attacker controlled looping condition resulting in an arbitrary null write. An attacker controlled VI file can be used to trigger this vulnerability and can potentially result in code execution.EPSS2.17%7.8HighCVE-2017-2775national instruments · labview 2016 evaluation +1 morenational instruments labview 2016 evaluationAn exploitable memory corruption vulnerability exists in the LvVariantUnflatten functionality in 64-bit versions of LabVIEW before 2015 SP1 f7 Patch and 2016 before f2 Patch. A specially crafted VI file can cause a user controlled value to be used as a loop terminator resulting in internal heap corruption. An attacker controlled VI file can be used to trigger this vulnerability, exploitation could lead to remote code execution.EPSS2.94%8.4HighCVE-2024-4080ni · labviewMemory Corruption Due to Improper Length Checks in LabVIEW tdcore.dllA memory corruption issue due to an improper length check in LabVIEW tdcore.dll may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions.EPSS0.27%8.4HighCVE-2024-4081ni · labviewMemory Corruption Due to Improper Length Check in NI LabVIEWA memory corruption issue due to an improper length check in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects NI LabVIEW 2024 Q1 and prior versions.EPSS0.27%7.8HighCVE-2024-4079ni · labviewOut of Bounds Read Due to Missing Bounds Check in LabVIEWAn out of bounds read due to a missing bounds check in LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions.EPSS0.28%8.4HighCVE-2024-10496ni · labviewOut of bounds read in BuildFontMap in fontmgr.cpp in NI LabVIEWAn out of bounds read due to improper input validation in BuildFontMap in fontmgr.cpp in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q3 and prior versions.EPSS0.19%8.4HighCVE-2024-10495ni · labviewOut of bounds read when loading the font table in fontmgr.cpp in NI LabVIEWAn out of bounds read due to improper input validation when loading the font table in fontmgr.cpp in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q3 and prior versions.EPSS0.19%8.4HighCVE-2024-10494ni · labviewOut of bounds read in HeapObjMapImpl.cpp in NI LabVIEWAn out of bounds read due to improper input validation in HeapObjMapImpl.cpp in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q3 and prior versions.EPSS0.19%5.5MediumCVE-2024-6638ni · labviewInteger Overflow Vulnerability Reading TDMS Files in LabVIEWAn integer overflow vulnerability due to improper input validation when reading TDMS files in LabVIEW may result in an infinite loop. Successful exploitation requires an attacker to provide a user with a specially crafted TDMS file. This vulnerability affects LabVIEW 2024 Q1 and prior versions.EPSS0.16%7.8HighCVE-2024-23612ni · labviewImproper Error Handling Issue in LabVIEWAn improper error handling vulnerability in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions.EPSS0.60%7.8HighCVE-2024-23610ni · labviewOut of Bounds Write Due to Missing Bounds Check in LabVIEWAn out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions.EPSS0.59%7.8HighCVE-2024-23609ni · labviewImproper Error Handling Issue in LabVIEWAn improper error handling vulnerability in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions.EPSS0.59%7.8HighCVE-2024-23611ni · labviewOut of Bounds Write Due to Missing Bounds Check in LabVIEWAn out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions.EPSS0.60%7.8HighCVE-2024-23608ni · labviewOut of Bounds Write Due to Missing Bounds Check in LabVIEWAn out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions.EPSS0.59%8.5HighCVE-2026-16233ni · labviewOut-of-Bounds Write Vulnerability in NI LabVIEW when loading VIThere is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI.  This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.EPSS0.13%8.5HighCVE-2026-16234ni · labviewOut-of-Bounds Read Vulnerability in NI LabVIEW when loading VIThere is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI.  This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.EPSS0.13%7.8HighCVE-2026-18444ni · labviewInteger Conversion Vulnerability Resulting in an Out of Bounds Read in NI LabVIEWThere is an integer conversion vulnerability resulting in an out-of-bounds read when loading images recently discovered in NI LabVIEW.  This may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI file.  This vulnerability affects NI LabVIEW 2026 Q3 and prior versions.EPSS0.13%