CVE-2024-10494CWE-1285

Out of bounds read in HeapObjMapImpl.cpp in NI LabVIEW

High · published December 10, 2024

CVSS v4.0
8.4
EPSS
0%
Percentile
8.4
In the wild
Unconfirmed
What it is

An out of bounds read due to improper input validation in HeapObjMapImpl.cpp in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q3 and prior versions.

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N
EPSS
0.00193 · 8.4th percentile
Weakness
CWE-1285 · Improper Validation of Specified Index, Position, or Offset in Input
Published
2024-12-10T15:49Z
EPSS history
Timeline
  • 10 DEC 15:49Z
    Out of bounds read in HeapObjMapImpl.cpp in NI LabVIEW
    cvelistv5