NI LabVIEW Memory Corruption Vulnerability

CVE-2024-4081

What is CVE-2024-4081?

A memory corruption vulnerability exists in the NI LabVIEW software due to improper length checks, which could lead to unintended behavior. When successfully exploited, this flaw may allow attackers to execute arbitrary code, or disclose sensitive information by enticing users to open a specially crafted virtual instrument (VI). This vulnerability impacts all versions up to and including NI LabVIEW 2024 Q1. Users of this software should prioritize reviewing their environments and applying necessary security updates as outlined by the vendor to mitigate potential threats.

References