CVE-2026-64201 - Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI

Back Back to CVE browser

HIGH

Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI

Published Aug 25, 2026

8.5

HIGH

CVSS 4.0

EPSS 0.19%

Description

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.

Affected products

Vendor NI Product LabVIEW Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <23.0.0
- Version
  23.1.0
  Status
  affected
  Constraints
  <23.3.10
- Version
  24.1.0
  Status
  affected
  Constraints
  <24.3.7
- Version
  25.1.0
  Status
  affected
  Constraints
  <25.3.5
- Version
  26.1.0
  Status
  affected
  Constraints
  <26.3.1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

LabVIEW

unaffected

Version	Status	Constraints
0	affected	<23.0.0
23.1.0	affected	<23.3.10
24.1.0	affected	<24.3.7
25.1.0	affected	<25.3.5
26.1.0	affected	<26.3.1

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-125

Out-of-bounds Read

CWE-787

Out-of-bounds Write

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-65590		Advisory
https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/memory-corruption-vulnerabilities-ni-labview.html		PatchVendor Advisory