CVEvulnerability

CVE-2025-2634

7.3 HIGH Published 2025-07-23 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-07-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 4.0 ([email protected])
7.3 HIGH — CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-1285

Description

Out of bounds read vulnerability due to improper bounds checking in NI LabVIEW in fontmgr may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q1 and prior versions.

Affected configurations

• ni labview (<= 2021) • ni labview 2022 • ni labview 2023 • ni labview 2024 • ni labview 2025

Related

Weakness · CWE (1)

  • CWE-1285 Improper Validation of Specified Index, Position, or Offset in Input weakness

References