Description
There is an out of bounds read vulnerability in NI LabVIEW in lvre!DataSizeTDR() when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q3 (25.3) and prior versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NI | LabVIEW | ≤ 22.3.6, 23.1.0 – ≤ 23.3.7, 24.1.0 – ≤ 24.3.4, 25.1.0 – ≤ 25.3.2 | — |
Advisories 1
- ICSA-25-352-03 National Instruments LabView CISA ICS & IT advisories · Dec 18, 2025