Volerion logoVolerion
Volerion logoVolerion

NI LabVIEW Memory Corruption Vulnerability Leading to Arbitrary Code Execution

Vulnerability

A memory corruption vulnerability has been identified in NI LabVIEW versions through 2025 Q1. This vulnerability arises from improper error handling when a VILinkObj is null, potentially allowing arbitrary code execution. Successful exploitation requires an attacker to persuade a user to open a specially crafted VI.

Impact

Exploitation of this vulnerability could lead to memory corruption, allowing for arbitrary code execution within the LabVIEW environment.

Remediation

Users are advised to upgrade to LabVIEW 2025 Q3 or later. For LabVIEW 2025 Q1, a patch is in progress. Instructions for downloading the updated version are available on the NI Software Downloads page.

Added: Jul 29, 2025, 10:17 PM
Updated: Jul 29, 2025, 10:17 PM

Vulnerability Rating

Custom Algorithm
spread
5.4
impact
10.0
exploitability
4.4
remediation
7.7
relevance
0.3
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.