Memory Corruption Vulnerability in NI Circuit Design Suite
CVE-2025-30418

8.5HIGH

Key Information:

Vendor

Ni

Status
Circuit Design Suite
Vendor
CVE Published:
15 May 2025

What is CVE-2025-30418?

A memory corruption issue has been identified in the CheckPins() function of the SymbolEditor within NI Circuit Design Suite. This vulnerability arises from an out of bounds write, potentially leading to information disclosure or arbitrary code execution. Attackers can exploit this vulnerability by enticing users to open a specially crafted .sym file, affecting all versions up to and including 14.3.0.

Affected Version(s)

Circuit Design Suite 0 <= 14..3.0

References

https://www.ni.com/en/support/security/available-critical...

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Michael Heinzl working with CISA
.