CVE-2026-64203
Received Received - Intake

Memory Corruption in NI LabVIEW

Publication date: 2026-08-25

Last updated on: 2026-08-25

Assigner: National Instruments

Description
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI.  This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-25
Last Modified
2026-08-25
Generated
2026-08-25
AI Q&A
2026-08-25
EPSS Evaluated
N/A
NVD
CVE-2026-64203
EUVD
EUVD-2026-65592

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ni labview to 26.3.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a memory corruption vulnerability in NI LabVIEW that could allow an attacker to disclose information or execute arbitrary code. Exploitation requires tricking a user into opening a specially crafted VI file. It affects LabVIEW 2026 Q3 and earlier versions.

Detection Guidance

Detection involves checking for LabVIEW installations and monitoring for suspicious VI files. Inspect files with .vi extension for unexpected behavior or unknown sources. Use system monitoring tools to detect unusual memory usage or crashes in LabVIEW processes.

Impact Analysis

If exploited, this vulnerability could let an attacker access sensitive data on your system or run malicious code. This might lead to data theft, system compromise, or further network infiltration depending on your environment.

Compliance Impact

This vulnerability could lead to unauthorized data access or disclosure, violating GDPR or HIPAA requirements for data protection. Organizations may face compliance penalties if exploited due to insufficient safeguards.

Mitigation Strategies

Immediately update LabVIEW to the latest version beyond 2026 Q3. Avoid opening VI files from untrusted sources. Restrict user permissions to minimize exploitation risk. Monitor for unusual activity in LabVIEW processes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64203. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart