Description
A memory corruption issue due to an improper length check in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects NI LabVIEW 2024 Q1 and prior versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NI | LabVIEW | ≤ 24.1 | — |
Advisories 1
- ICSA-24-205-03 National Instruments LabVIEW CISA ICS & IT advisories · Jul 23, 2024