Description
There is a memory corruption vulnerability due to an out of bounds write in XML_Serialize() when using SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .sym file. This vulnerability affects NI Circuit Design Suite 14.3.1 and prior versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NI | Circuit Design Suite | ≤ 14.3.1 | — |
Advisories 1
- ICSA-25-273-06 National Instruments Circuit Design Suite CISA ICS & IT advisories · Sep 30, 2025