CVE-2026-32864
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
An out-of-bounds read vulnerability in the mgcore_SH_25_3!aligned_free() function in NI LabVIEW. It could lead to information disclosure or arbitrary code execution. Requires the user to open a specially crafted VI file. Affects LabVIEW 2026 Q1 (26.1.0) and prior.
Risk Assessment
An attacker could access sensitive data or take control of the system if the user opens a malicious VI file.
Recommendation
Update NI LabVIEW to a version later than 26.1.0. Instruct users not to open VI files from untrusted sources.
Other vulnerabilities in NI LabVIEW
See all- CVE-2026-64204High
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.
- CVE-2026-64203High
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.
- CVE-2026-64202High
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.
- CVE-2026-64201High
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.
- CVE-2026-18445Medium
An integer overflow vulnerability leading to an out-of-bounds write was discovered in NI LabVIEW. This may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI file.
- CVE-2026-18444Medium
An integer conversion vulnerability leading to an out-of-bounds read when loading images was discovered in NI LabVIEW. This may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI file.
- CVE-2026-16234High
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.
- CVE-2026-16233High
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.
- CVE-2026-32863High
NI LabVIEW has a memory corruption vulnerability due to an out-of-bounds read in sentry_transaction_context_set_operation(). This can lead to information disclosure or arbitrary code execution. Exploitation requires the user to open a specially crafted VI file.
- CVE-2026-32862High
There is a memory corruption vulnerability due to an out-of-bounds write in ResFileFactory::InitResourceMgr() in NI LabVIEW. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI file. This vulnerability affects NI LabVIEW 2026 Q1 (26.1.0) and prior versions.
Original NVD description (English source)
There is a memory corruption vulnerability due to an out-of-bounds read in mgcore_SH_25_3!aligned_free() in NI LabVIEW. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI file. This vulnerability affects NI LabVIEW 2026 Q1 (26.1.0) and prior versions.

