Out of Bounds Read Vulnerability in NI LabVIEW Products

CVE-2025-64467

What is CVE-2025-64467?

An out of bounds read vulnerability exists in NI LabVIEW within the LVResFile::FindRsrcListEntry() function when it attempts to parse a malformed VI file. This flaw could enable an attacker to gain unauthorized access to sensitive information or potentially execute arbitrary code. For effective exploitation, an attacker would need to trick a user into opening a specially crafted VI file. Affected versions include NI LabVIEW 2025 Q3 (25.3) and earlier, emphasizing the critical need for updates to protect against potential exploits.

References