Memory Corruption Vulnerability in NI Circuit Design Suite
CVE-2025-6034

8.5HIGH

Key Information:

Vendor

Ni

Status
Circuit Design Suite
Vendor
CVE Published:
30 September 2025

What is CVE-2025-6034?

A memory corruption vulnerability exists within the NI Circuit Design Suite due to an out of bounds read in the DefaultFontOptions() function. This flaw can be exploited by attackers who lure users into opening specially crafted .sym files, potentially leading to information disclosure or arbitrary code execution. This issue affects versions 14.3.1 and earlier of the NI Circuit Design Suite, highlighting the importance of keeping software up to date and understanding the security implications of file handling within design software.

Affected Version(s)

Circuit Design Suite 0 <= 14.3.1

References

https://www.ni.com/en/support/security/available-critical...

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Michael Heinzl working with CISA
JSON
.
CVE-2025-6034 : Memory Corruption Vulnerability in NI Circuit Design Suite