CVE-2026-32862
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
There is a memory corruption vulnerability due to an out-of-bounds write in ResFileFactory::InitResourceMgr() in NI LabVIEW. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI file. This vulnerability affects NI LabVIEW 2026 Q1 (26.1.0) and prior versions.
Risk Assessment
The risk includes disclosure of sensitive information or remote code execution, which could lead to system compromise by an attacker.
Recommendation
Upgrade NI LabVIEW to a version later than 2026 Q1 and avoid opening VI files from untrusted sources.
Other vulnerabilities in NI LabVIEW
See all- CVE-2026-64204High
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.
- CVE-2026-64203High
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.
- CVE-2026-64202High
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.
- CVE-2026-64201High
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.
- CVE-2026-18445Medium
An integer overflow vulnerability leading to an out-of-bounds write was discovered in NI LabVIEW. This may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI file.
- CVE-2026-18444Medium
An integer conversion vulnerability leading to an out-of-bounds read when loading images was discovered in NI LabVIEW. This may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI file.
- CVE-2026-16234High
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.
- CVE-2026-16233High
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.
- CVE-2026-32864High
An out-of-bounds read vulnerability in the mgcore_SH_25_3!aligned_free() function in NI LabVIEW. It could lead to information disclosure or arbitrary code execution. Requires the user to open a specially crafted VI file. Affects LabVIEW 2026 Q1 (26.1.0) and prior.
- CVE-2026-32863High
NI LabVIEW has a memory corruption vulnerability due to an out-of-bounds read in sentry_transaction_context_set_operation(). This can lead to information disclosure or arbitrary code execution. Exploitation requires the user to open a specially crafted VI file.
Original NVD description (English source)
There is a memory corruption vulnerability due to an out-of-bounds write in ResFileFactory::InitResourceMgr() in NI LabVIEW. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI file. This vulnerability affects NI LabVIEW 2026 Q1 (26.1.0) and prior versions.