PT-2025-52235 · National Instruments · Ni Labview

Michael Heinzl · Published 2025-12-18 · Updated 2025-12-24 · CVE-2025-64465

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions NI LabVIEW versions 2025 Q3 (25.3) and prior

Description An out of bounds read issue exists in NI LabVIEW within the lvre!DataSizeTDR() function when processing a damaged VI file. Exploitation of this issue could lead to information disclosure or arbitrary code execution. A successful attack requires a user to open a specifically designed VI file.

Recommendations Update to a version later than 2025 Q3 (25.3).

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2025-64465

Affected Products

Ni Labview

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-64465 · Security Note
• https://ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/multiple-memory-corruption-vulnerabilities-in-ni-labview.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-64465 · Vendor Advisory
• https://t.me/cveNotify/146758 · Telegram Post
• https://twitter.com/CVEnew/status/2001728051646988411 · Twitter Post