Description
There is a use-after-free vulnerability in sentry!sentry_span_set_data() when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q3 (25.3) and prior versions
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NI | LabVIEW | ≤ 22.3.6, 23.1.0 – ≤ 23.3.7, 24.1.0 – ≤ 24.3.4, 25.1.0 – ≤ 25.3.2 | — |
Advisories 1
- ICSA-25-352-03 National Instruments LabView CISA ICS & IT advisories · Dec 18, 2025