CVE Catalog

CVE-2026-32864

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.14%

4th percentile - higher than 4% of all known CVEs

Summary

An out-of-bounds read vulnerability in the mgcore_SH_25_3!aligned_free() function in NI LabVIEW. It could lead to information disclosure or arbitrary code execution. Requires the user to open a specially crafted VI file. Affects LabVIEW 2026 Q1 (26.1.0) and prior.

Risk Assessment

An attacker could access sensitive data or take control of the system if the user opens a malicious VI file.

Recommendation

Update NI LabVIEW to a version later than 26.1.0. Instruct users not to open VI files from untrusted sources.

Other vulnerabilities in NI LabVIEW

See all
Original NVD description (English source)

There is a memory corruption vulnerability due to an out-of-bounds read in mgcore_SH_25_3!aligned_free() in NI LabVIEW.  This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI file. This vulnerability affects NI LabVIEW 2026 Q1 (26.1.0) and prior versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS