Memory Corruption Vulnerability in NI Circuit Design Suite by National Instruments
CVE-2025-30421

8.5HIGH

Key Information:

Vendor

Ni

Status
Circuit Design Suite
Vendor
CVE Published:
15 May 2025

What is CVE-2025-30421?

A memory corruption vulnerability exists in the SymbolEditor of NI Circuit Design Suite, specifically within the DrObjectStorage::XML_Serialize() function. This flaw is triggered by a stack-based buffer overflow, allowing attackers to execute arbitrary code or disclose sensitive information. To exploit this vulnerability, an attacker must convince a user to open a specially crafted .sym file, exposing systems using NI Circuit Design Suite 14.3.0 and earlier versions to potential risks.

Affected Version(s)

Circuit Design Suite 0 <= 14.3.0

References

https://www.ni.com/en/support/security/available-critical...

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Michael Heinzl working with CISA
.