PT-2025-52228 · National Instruments · Ni Labview

Michael Heinzl · Published 2025-12-18 · Updated 2025-12-24 · CVE-2025-64461

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions NI LabVIEW versions prior to 25.3

Description An out of bounds write issue exists in NI LabVIEW within the RevBL() function when processing a damaged VI file. This can lead to information disclosure or arbitrary code execution if an attacker successfully tricks a user into opening a specifically designed VI file.

Recommendations Update to a version later than 25.3.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2025-64461

Affected Products

Ni Labview

References · 5

• https://ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/multiple-memory-corruption-vulnerabilities-in-ni-labview.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-64461 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-64461 · Security Note
• https://t.me/cveNotify/146754 · Telegram Post
• https://twitter.com/CVEnew/status/2001728059934904807 · Twitter Post