CVE-2026-18445: NI LabVIEW, грешка в паметта

Описание

Оригинално описание

There is an integer overflow vulnerability resulting in an out-of-bounds write recently discovered in NI LabVIEW.  This may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI file.  This vulnerability affects NI LabVIEW 2026 Q3 and prior versions.

Засегнати продукти

• NI LabVIEW: преди 23.0.0; 23.1.0 преди 23.3.10; 24.1.0 преди 24.3.7; 25.1.0 преди 25.3.5; 26.1.0 преди 26.3.1

Вид слабост

• CWE-190 Целочислено препълване отгоре

История

Други уязвимости в NI LabVIEW

• 8.5CVE-2026-64204
• 8.5CVE-2026-64203
• 8.5CVE-2026-64202
• 8.5CVE-2026-64201
• 8.5CVE-2026-16234

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-18445
• https://nvd.nist.gov/vuln/detail/CVE-2026-18445
• https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/integer-overflow-vulnerability-resulting-in-an-out-of-bounds-write-in-ni-labview.html