Description
Vision-related software from NI used a third-party library for image processing that exposes several vulnerabilities. These vulnerabilities may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NI | Vision Development Module | < 25.0.0 | 25.0.0 |
| NI | FlexRIO | < 25.0.0 | 25.0.0 |
| NI | NI-IMAQdx | ≤ 23.1.0 | — |
| NI | Vision Acquisition Software | ≤ 23.1.0 | — |
| NI | Vision Builder for Automated Inspection | < 24.0.0 | 24.0.0 |
| NI | Data Record AD | ≤ 2.0.0 | — |
| NI | FRC Game Tools | ≤ 25.0.0 | — |