PT-2025-52234 · National Instruments · Ni Labview

Michael Heinzl · Published 2025-12-18 · Updated 2025-12-24 · CVE-2025-64464

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions NI LabVIEW versions prior to 2025 Q3 (25.3)

Description An out of bounds read issue exists in NI LabVIEW within the VisaWriteFromFile() function when processing a corrupted VI file. Exploitation of this issue could lead to information disclosure or arbitrary code execution. A successful attack requires a user to open a specifically designed VI file.

Recommendations Update to NI LabVIEW 2025 Q3 (25.3) or later.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2025-64464

Affected Products

Ni Labview

References · 5

• https://osv.dev/vulnerability/CVE-2025-64464 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-64464 · Security Note
• https://ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/multiple-memory-corruption-vulnerabilities-in-ni-labview.html · Vendor Advisory
• https://twitter.com/CVEnew/status/2001728053026902217 · Twitter Post
• https://t.me/cveNotify/146757 · Telegram Post