Description
There is an untrusted pointer dereference vulnerability in the NI grpc-device sideband streaming API that may allow an attacker to cause an arbitrary memory dereference, potentially resulting in remote code execution. Successful exploitation requires an attacker to supply a specially crafted Moniker protobuf message. This affects NI grpc-device 2.17.0 and prior versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NI | grpc-device | ≤ 2.17.0 | — |
| NI | InstrumentStudio | ≤ 26.3.0 | — |