Rocco Calvi
+1
·
Published
2025-07-29
·
Updated
2025-07-29
·
CVE-2025-7849
7.8
High
| Base vector | Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
NI LabVIEW versions 2025 Q1 and prior
Description:
A memory corruption issue due to improper error handling when a `VILinkObj` is null exists, potentially leading to arbitrary code execution. Successful exploitation requires a user to open a specially crafted VI.
Recommendations:
Update to a version later than 2025 Q1.
Fix