CVE Catalog

CVE-2025-64469

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.16%

5th percentile - higher than 5% of all known CVEs

Summary

NI LabVIEW has a stack-based buffer overflow vulnerability in LVResFile::FindRsrcListEntry() when parsing a corrupted VI file. This may result in information disclosure or arbitrary code execution. Requires the user to open a specially crafted VI.

Risk Assessment

An attacker could exploit this vulnerability to execute code in the context of the user opening the file, potentially leading to system compromise or data theft.

Recommendation

Update NI LabVIEW to a version newer than 2025 Q3 (25.3). Avoid opening VI files from untrusted sources.

Other vulnerabilities in NI LabVIEW

See all
Original NVD description (English source)

There is a stack-based buffer overflow vulnerability in NI LabVIEW in LVResFile::FindRsrcListEntry() when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q3 (25.3) and prior versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS