Skip to content
OpenAdvisories
Low · 3.7 CVE-2026-9143 EUVD-2026-38032

Incorrect Conversion between Numeric Types in NI grpc-device due to missing range checks in CodeGen

Published Jun 19, 2026 · Updated Jun 22, 2026 · Assigned by NI

Description

There is an incorrect conversion between numeric types vulnerability in NI grpc-device due to missing range checks in CodeGen.  This may silently discard high bits if a size value exceeded the target type's range. This affects NI grpc-device 2.17.0 and prior versions.

Affected products

VendorProductAffectedFixed
NI grpc-device ≤ 2.17.0 —
NI InstrumentStudio ≤ 26.3.0 —

References