CVE-2024-12740CWE-1395

Dependency on Vulnerable Third-Party Component exposes Vulnerabilities in NI Vision Software

High · published January 27, 2025

CVSS v4.0
7.0
EPSS
0%
Percentile
8.2
In the wild
Unconfirmed
What it is

Vision related software from NI used a third-party library for image processing that exposes several vulnerabilities. These vulnerabilities may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted file.

The record
Technical detail
CVSS v4.0
7.0 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/AU:N
EPSS
0.00190 · 8.2th percentile
Weakness
CWE-1395 · Dependency on Vulnerable Third-Party Component
Published
2025-01-27T17:17Z
EPSS history
Timeline
  • 27 JAN 17:17Z
    Dependency on Vulnerable Third-Party Component exposes Vulnerabilities in NI Vision Software
    cvelistv5