CVE-2026-64201
Received Received - Intake

Memory Corruption in NI LabVIEW

Vulnerability report for CVE-2026-64201, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-25

Last updated on: 2026-08-25

Assigner: National Instruments

Description

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.Β  Successful exploitation requires an attacker to get a user to open a specially crafted VI.Β  This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-25
Last Modified
2026-08-25
Generated
2026-08-25
AI Q&A
2026-08-25
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ni labview to 26.3.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a memory corruption issue in NI LabVIEW that could allow an attacker to disclose information or execute arbitrary code. Exploitation requires tricking a user into opening a specially crafted VI file.

Detection Guidance

Detection involves checking for LabVIEW installations and monitoring for suspicious VI files. Inspect files with .vi extension for unexpected behavior or unknown sources. Use system monitoring tools to detect unusual memory usage or crashes in LabVIEW processes.

Impact Analysis

If exploited, this vulnerability could lead to unauthorized access to sensitive data or allow attackers to run malicious code on your system. It primarily affects users of NI LabVIEW 2026 Q3 (26.3.0) and earlier versions.

Mitigation Strategies

Update LabVIEW to the latest version (2026 Q3 or later). Avoid opening VI files from untrusted sources. Implement application whitelisting to restrict LabVIEW execution to approved paths only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64201. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart