CVE-2025-64461
There is an out of bounds write vulnerability in NI LabVIEW in mgocre_SH_25_3!RevBL() when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q3 (25.3) and prior versions.
- Score
- CVSS 4.0 8.5 High
- Status
- Analyzed - security@ni.com
- Published
- 2025-12-18
- Last modified
- 2026-02-26
- Weaknesses
- CWE-787
Affected products
References
- https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/multiple-memory-corrupti…
