CVE-2025-7848

A memory corruption vulnerability due to improper input validation in lvpict.cpp exists in NI LabVIEW that may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q1 and prior versions.

Score

CVSS 4.0 8.5 High

Status

Analyzed - security@ni.com

Published

2025-07-29

Last modified

2026-02-26

Weaknesses

CWE-1285

Affected products

• Labview (Ni)

References

• https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/memory-corruption-vulner…