NI Vision Software Arbitrary Code Execution Vulnerability via Vulnerable Third-Party Library

A vulnerability allowing arbitrary code execution has been identified in NI Vision software products that rely on a third-party library for image processing. This issue arises from the use of a vulnerable component, which has now been replaced. Successful exploitation requires a user to open a specially crafted file.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the user's system.

Remediation

Users are advised to upgrade to the latest versions of the affected software. If an upgrade is not possible, install Vision Common Resources 2025 Q1 or later from the NI Package Manager. Specific upgrade instructions are available for each affected product on the NI website.