Skip to content
OpenAdvisories
Medium · 6.6 CVE-2026-18444 EUVD-2026-65601GHSA-4x9q-2hvp-vr99

Integer Conversion Vulnerability Resulting in an Out of Bounds Read in NI LabVIEW

Published Aug 25, 2026 · Updated Nov 4, 2026 · Assigned by NI

Description

There is an integer conversion vulnerability resulting in an out-of-bounds read when loading images recently discovered in NI LabVIEW.  This may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI file.  This vulnerability affects NI LabVIEW 2026 Q3 and prior versions.

Affected products

VendorProductAffectedFixed
NI LabVIEW < 23.0.0, 23.1.0 – < 23.3.10, 24.1.0 – < 24.3.7, 25.1.0 – < 25.3.5, 26.1.0 – < 26.3.1 23.0.0

References