Memory Corruption Vulnerabilities in NI LabVIEW

Created Apr 7, 2026

Overview

There are three memory corruption vulnerabilities recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI.  These vulnerabilities affect NI LabVIEW 2026 Q1 and prior versions.

These vulnerabilities are identified as:

CVE-2026-32862 – Out of Bounds Write in ResFileFactory::InitResourceMgr()
CVE-2026-32863 – Out-of-Bounds Read in sentry_transaction_context_set_operation()
CVE-2026-32864 – Out-of-Bounds Read in mgcore_SH_25_3!aligned_free()

Mitigation Guidance
Affected Products
CVSS Score
Further Information
Acknowledgements
Additional Resources

Mitigation Guidance

NI strongly recommends upgrading the affected software to mitigate these vulnerabilities.  Refer to the Affected Products section for information on upgrading these products. 

Affected Products

CVSS Score

CVE-2026-32862 – 7.8 - CVSS:3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVE-2026-32862 – 8.5 - CVSS:4.0 AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVE-2026-32863 – 7.8 - CVSS:3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVE-2026-32863 – 8.5 - CVSS:4.0 AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVE-2026-32864 – 7.8 - CVSS:3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVE-2026-32864 – 8.5 - CVSS:4.0 AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Further Information

At NI, we view the security of our products as an important part of our commitment to our customers. Go to ni.com/security to stay informed and act upon security alerts and issues.

Acknowledgements

NI would like to thank Michael Heinzl for reporting this issue and working with us on coordinated disclosure.

Additional Resources

CVE-2026-32862 - National Vulnerability Database
CVE-2026-32863 - National Vulnerability Database
CVE-2026-32864 - National Vulnerability Database
CWE-787 – Out-of-bounds Write
CWE-125 – Out-of-bounds Read

Product Version	Mitigation
LabVIEW 2026	Upgrade to LabVIEW 2026 Q1 Patch 1 or later from NI Package Manager or Software Downloads
LabVIEW 2025	Upgrade to LabVIEW 2025 Q3 Patch 4 or later from NI Package Manager or Software Downloads
LabVIEW 2024	Upgrade to LabVIEW 2024 Q3 Patch 6 or later from NI Package Manager or Software Downloads
LabVIEW 2023	Upgrade to LabVIEW 2023 Q3 Patch 9 or later from NI Package Manager or Software Downloads
LabVIEW 2022 and prior	Not in Mainstream Support

Was this information helpful?

Yes