Home Support Security

Multiple Memory Corruption Vulnerabilities in NI LabVIEW

Created Dec 11, 2025

Overview

There are nine memory corruption vulnerabilities recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI.  These vulnerabilities affect NI LabVIEW 2025 Q3 and prior versions.

 

These vulnerabilities are identified as:

  • CVE-2025-64461 – Out of Bounds Write in mgocre_SH_25_3!RevBL()
  • CVE-2025-64462 – Out-of-Bounds Read in LVResFile::RGetMemFileHandle()
  • CVE-2025-64463 – Out-of-Bounds Read in LVResource::DetachResource()
  • CVE-2025-64464 – Out-of-Bounds Read in lvre!VisaWriteFromFile()
  • CVE-2025-64465 – Out-of-Bounds Read in lvre!DataSizeTDR()
  • CVE-2025-64466 – Out-of-Bounds Read in lvre!ExecPostedProcRecPost()
  • CVE-2025-64467 – Out-of-Bounds Read in LVResFile::FindRsrcListEntry()
  • CVE-2025-64468 – Use-after-Free in sentry!sentry_span_set_data()  
  • CVE-2025-64469 – Stack-based Buffer Overflow in LVResource::DetachResource()

Contents

Mitigation Guidance

NI strongly recommends upgrading the affected software to mitigate these vulnerabilities.  Refer to the Affected Products section for information on upgrading these products.  

Back to top

Affected Products

 

Back to top

CVSS Score

Back to top

Further Information

At NI, we view the security of our products as an important part of our commitment to our customers.  Go to ni.com/security to stay informed and act upon security alerts and issues.

Back to top

Acknowledgements

NI would like to thank Michael Heinzl working with CISA for reporting this issue and working with us on coordinated disclosure.

Back to top

Additional Resources

Back to top
Product VersionMitigation
LabVIEW 2025Upgrade to LabVIEW 2025 Q3 Patch 3 or later from NI Package Manager or Software Downloads
LabVIEW 2024Upgrade to LabVIEW 2024 Q3 Patch 5 or later from NI Package Manager or Software Downloads
LabVIEW 2023Upgrade to LabVIEW 2023 Q3 Patch 8 or later from NI Package Manager or Software Downloads
LabVIEW 2022Upgrade to LabVIEW 2022 Q3 Patch 7 or later from NI Package Manager or Software Downloads
LabVIEW 2021Not in Mainstream Support

Was this information helpful?

Yes

No