Out-of-Bounds Read in NI LabVIEW Causes Memory Corruption

Executive Summary

This vulnerability is a memory corruption issue caused by an out-of-bounds read in the function mgcore_SH_25_3!aligned_free() within NI LabVIEW. It occurs when a specially crafted VI file is opened by a user, which can lead to unintended behavior.

Exploitation of this vulnerability may allow an attacker to disclose sensitive information or execute arbitrary code on the affected system.

The vulnerability affects NI LabVIEW 2026 Q1 (version 26.1.0) and earlier versions.

Useful 0 Not Useful 0

Impact Analysis

If exploited, this vulnerability can have serious impacts including information disclosure, where sensitive data may be exposed to unauthorized parties.

Additionally, it can lead to arbitrary code execution, allowing an attacker to run malicious code on your system, potentially compromising system integrity, confidentiality, and availability.

Successful exploitation requires a user to open a specially crafted VI file, so user interaction is necessary.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability may result in information disclosure or arbitrary code execution if a user opens a specially crafted VI file. Such information disclosure could potentially impact compliance with data protection regulations like GDPR or HIPAA, which require safeguarding sensitive information from unauthorized access.

However, the provided information does not specify any direct impact or assessment regarding compliance with these or other common standards and regulations.

Useful 0 Not Useful 0