Skip to content
OpenAdvisories
High · 7.8 CVE-2024-12742 EUVD-2024-54011GHSA-6cm6-v8vp-qcpx

Deserialization of Untrusted Data Vulnerability in NI G Web Development Software

Published Mar 6, 2025 · Updated Mar 6, 2025 · Assigned by NI

Description

A deserialization of untrusted data vulnerability exists in NI G Web Development Software that may result in arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted project file.  This vulnerability affects G Web Development Software 2022 Q3 and prior versions.

Affected products

VendorProductAffectedFixed
NI G Web Development Software ≤ 22.3.1 —

References