NI Circuit Design Suite Memory Corruption Vulnerability Allowing Information Disclosure or Arbitrary Code Execution

A memory corruption vulnerability has been identified in NI Circuit Design Suite versions through 14.3.0. This vulnerability arises from an out-of-bounds write in the 'Library!DecodeBase64()' function, used by the Symbol Editor. Exploitation of this vulnerability could lead to information disclosure or arbitrary code execution. To successfully exploit this issue, an attacker must convince a user to open a specially crafted .sym file.

Impact

Exploitation of this vulnerability could result in memory corruption, allowing for information disclosure or arbitrary code execution.

Remediation

Users are advised to upgrade to NI Circuit Design Suite 14.3.1 or later. The update can be obtained through the NI Package Manager or the NI Software Downloads page.