CVE-2025-2631

Out of Bounds Write Vulnerability in NI LabVIEW in InitCPUInformation()

State: Published
Severity: 8.5 High
Published: Apr 9, 2025
Updated: Apr 9, 2025
Reserved: Mar 21, 2025

Description

Out of bounds write vulnerability due to improper bounds checking in NI LabVIEW in InitCPUInformation() that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q1 and prior versions.

Scores

CVSS	Score	Vector	Source
4.0	8.5 High	CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	NI
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	NI

Weaknesses

CWE-787 Out-of-bounds Write

Affected Products

Product	Versions
LabVIEWNI	before 22.3.4Affected 23.1.0 to before 23.3.5Affected 24.1.0 to before 24.3.2Affected 25.1.0 to before 25.1.1Affected

References

https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/out-of-bounds-write-vulnerabilities-in-ni-labview.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.