Memory Corruption Vulnerability in NI LabVIEW by National Instruments

CVE-2026-32864

What is CVE-2026-32864?

A memory corruption vulnerability in NI LabVIEW arises from an out-of-bounds read in the function mgcore_SH_25_3!aligned_free(). This can lead to information disclosure or arbitrary code execution. An attacker could exploit this vulnerability by tricking a user into opening a specially crafted VI file, making this issue particularly concerning for users of NI LabVIEW 2026 Q1 and earlier versions. Organizations using affected versions should prioritize remediation efforts.

References