PT-2025-52236 · National Instruments · Ni Labview

Michael Heinzl · Published 2025-12-18 · Updated 2025-12-24 · CVE-2025-64466

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions NI LabVIEW versions 2025 Q3 (25.3) and prior

Description An out of bounds read issue exists in NI LabVIEW within the ExecPostedProcRecPost() function when processing a damaged VI file. This can lead to information disclosure or arbitrary code execution if a user opens a specifically designed VI file.

Recommendations Update to a version later than 2025 Q3 (25.3).

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2025-64466

Affected Products

Ni Labview

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-64466 · Security Note
• https://osv.dev/vulnerability/CVE-2025-64466 · Vendor Advisory
• https://ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/multiple-memory-corruption-vulnerabilities-in-ni-labview.html · Vendor Advisory
• https://twitter.com/CVEnew/status/2001728050296427010 · Twitter Post
• https://t.me/cveNotify/146759 · Telegram Post