CVE-2026-18444
MediumCVSS 6.6Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
An integer conversion vulnerability leading to an out-of-bounds read when loading images was discovered in NI LabVIEW. This may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI file.
Risk Assessment
The risk includes potential data leakage or execution of malicious code in the user's context. The attack requires user interaction, which could be leveraged in phishing campaigns.
Recommendation
It is recommended to update NI LabVIEW to a version newer than 2026 Q3. Also be cautious when opening VI files from unknown sources.
Other vulnerabilities in NI LabVIEW
See all- CVE-2026-64204High
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.
- CVE-2026-64203High
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.
- CVE-2026-64202High
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.
- CVE-2026-64201High
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.
- CVE-2026-18445Medium
An integer overflow vulnerability leading to an out-of-bounds write was discovered in NI LabVIEW. This may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI file.
- CVE-2026-16234High
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.
- CVE-2026-16233High
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.
- CVE-2026-32864High
An out-of-bounds read vulnerability in the mgcore_SH_25_3!aligned_free() function in NI LabVIEW. It could lead to information disclosure or arbitrary code execution. Requires the user to open a specially crafted VI file. Affects LabVIEW 2026 Q1 (26.1.0) and prior.
- CVE-2026-32863High
NI LabVIEW has a memory corruption vulnerability due to an out-of-bounds read in sentry_transaction_context_set_operation(). This can lead to information disclosure or arbitrary code execution. Exploitation requires the user to open a specially crafted VI file.
- CVE-2026-32862High
There is a memory corruption vulnerability due to an out-of-bounds write in ResFileFactory::InitResourceMgr() in NI LabVIEW. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI file. This vulnerability affects NI LabVIEW 2026 Q1 (26.1.0) and prior versions.
Original NVD description (English source)
There is an integer conversion vulnerability resulting in an out-of-bounds read when loading images recently discovered in NI LabVIEW. This may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI file. This vulnerability affects NI LabVIEW 2026 Q3 and prior versions.