CVE Catalog

CVE-2025-64462

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.16%

5th percentile - higher than 5% of all known CVEs

Summary

NI LabVIEW has an out-of-bounds read vulnerability in LVResFile::RGetMemFileHandle() when parsing a corrupted VI file. This may result in information disclosure or arbitrary code execution. Requires the user to open a specially crafted VI.

Risk Assessment

An attacker could exploit this vulnerability to gain unauthorized access to data or execute code, posing a threat to system confidentiality and integrity.

Recommendation

Update NI LabVIEW to a version newer than 2025 Q3 (25.3). Do not open VI files from untrusted sources.

Other vulnerabilities in NI LabVIEW

See all
Original NVD description (English source)

There is an out of bounds read vulnerability in NI LabVIEW in LVResFile::RGetMemFileHandle() when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q3 (25.3) and prior versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS