Volerion logoVolerion
Volerion logoVolerion

NI LabVIEW Memory Corruption Vulnerability Allowing Information Disclosure or Arbitrary Code Execution

Vulnerability

A memory corruption vulnerability has been identified in NI LabVIEW versions through 2026 Q1 (26.1.0), caused by an out-of-bounds read in the function mgcore_SH_25_3!aligned_free(). This vulnerability could lead to information disclosure or arbitrary code execution. Exploitation requires a user to open a specially crafted VI file.

Impact

Exploitation of this vulnerability could result in memory corruption, allowing for information disclosure or arbitrary code execution.

Remediation

Users are advised to upgrade to LabVIEW 2026 Q1 Patch 1 or later. Instructions for downloading the patch are available on the NI website.

Added: Apr 7, 2026, 9:11 PM
Updated: Apr 7, 2026, 9:11 PM

Vulnerability Rating

Custom Algorithm
spread
5.4
impact
7.5
exploitability
3.6
remediation
7.7
relevance
5.2
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.