CVE-2026-64202
Received Received - Intake

Memory Corruption in NI LabVIEW

Publication date: 2026-08-25

Last updated on: 2026-08-25

Assigner: National Instruments

Description
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI.  This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-25
Last Modified
2026-08-25
Generated
2026-08-25
AI Q&A
2026-08-25
EPSS Evaluated
N/A
NVD
CVE-2026-64202
EUVD
EUVD-2026-65591

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ni labview to 26.3.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a memory corruption vulnerability in NI LabVIEW that could allow an attacker to disclose information or execute arbitrary code. Exploitation requires tricking a user into opening a specially crafted VI file. It affects LabVIEW 2026 Q3 (26.3.0) and earlier versions.

Detection Guidance

This vulnerability requires a user to open a specially crafted VI file to exploit. Monitor for suspicious VI files or unexpected LabVIEW crashes. Check LabVIEW logs for unusual activity. Ensure all LabVIEW installations are updated to the latest version.

Impact Analysis

If exploited, this vulnerability could lead to unauthorized access to sensitive data or allow attackers to run malicious code on your system. Since it requires user interaction, opening a malicious VI file is necessary for exploitation.

Compliance Impact

The vulnerability may lead to information disclosure or arbitrary code execution, which could result in unauthorized access to sensitive data. This could impact compliance with GDPR (data protection) and HIPAA (healthcare data privacy) by exposing personal or protected health information.

Mitigation Strategies

Update NI LabVIEW to version 2026 Q3 (26.3.0) or later immediately. Avoid opening VI files from untrusted sources. Restrict user permissions to minimize potential impact. Monitor for any signs of exploitation or unusual behavior.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64202. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart