Description
There is a memory corruption vulnerability due to an out of bounds read in Bitmap::InternalDraw() when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .sym file. This vulnerability affects NI Circuit Design Suite 14.3.0 and prior versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NI | Circuit Design Suite | ≤ 14.3.0 | — |
Advisories 1
- ICSA-25-140-02 National Instruments Circuit Design Suite CISA ICS & IT advisories · May 20, 2025