NI Circuit Design Suite Memory Corruption Vulnerability Allowing Arbitrary Code Execution

A stack-based buffer overflow vulnerability has been identified in the DrObjectStorage::XML_Serialize() function within the Symbol Editor of NI Circuit Design Suite. This memory corruption issue could lead to information disclosure or arbitrary code execution. Exploitation requires an attacker to persuade a user to open a specially crafted .sym file. The vulnerability affects NI Circuit Design Suite versions through 14.3.0.

Impact

Exploitation of this vulnerability could result in memory corruption, allowing for arbitrary code execution or information disclosure.

Remediation

Users are advised to upgrade to NI Circuit Design Suite 14.3.1 or later. The update can be obtained through the NI Package Manager or the NI Software Downloads page.