NI Circuit Design Suite Memory Corruption Vulnerability Allowing Information Disclosure or Arbitrary Code Execution

A memory corruption vulnerability has been identified in the Symbol Editor of NI Circuit Design Suite, versions through 14.3.0. This vulnerability arises from an out-of-bounds read in the GetSymbolBorderRectSize() function. Successful exploitation could lead to information disclosure or arbitrary code execution, requiring an attacker to persuade a user to open a specially crafted .sym file.

Impact

Exploitation of this vulnerability could result in memory corruption, allowing for information disclosure or arbitrary code execution.

Remediation

Users are advised to upgrade to NI Circuit Design Suite 14.3.1 or later. The update can be obtained through NI Package Manager or the NI Software Downloads page.