CVE-2026-18445 - Integer Overflow Vulnerability Resulting in an Out of Bounds Write in NI LabVIEW

Back Back to CVE browser

MEDIUM

Integer Overflow Vulnerability Resulting in an Out of Bounds Write in NI LabVIEW

Published Aug 25, 2026

6.9

MEDIUM

CVSS 4.0

EPSS 0.13%

Description

There is an integer overflow vulnerability resulting in an out-of-bounds write recently discovered in NI LabVIEW. This may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI file.  This vulnerability affects NI LabVIEW 2026 Q3 and prior versions.

Affected products

Vendor NI Product LabVIEW Default
unaffected
Affected
- ≥ 0, < 23.0.0
- ≥ 23.1.0, < 23.3.10
- ≥ 24.1.0, < 24.3.7
- ≥ 25.1.0, < 25.3.5
- ≥ 26.1.0, < 26.3.1

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
NI	LabVIEW	unaffected	Affected ≥ 0, < 23.0.0 ≥ 23.1.0, < 23.3.10 ≥ 24.1.0, < 24.3.7 ≥ 25.1.0, < 25.3.5 ≥ 26.1.0, < 26.3.1

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-190

Integer Overflow

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-65607		Advisory
https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/integer-overflow-vulnerability-resulting-in-an-out-of-bounds-write-in-ni-labview.html		PatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner NI

Published Aug 25, 2026

Updated Aug 31, 2026

Reserved Jul 30, 2026

Link CVE-2026-18445

CISA Vulnrichment

Updated Aug 26, 2026

NVD

Status Analyzed

Modified Sep 8, 2026

Link CVE-2026-18445

Red Hat

No data

ENISA EUVD

Assigner NI

Published Aug 25, 2026

Updated Aug 31, 2026

Link EUVD-2026-65607

GitHub

No data