CVE-2024-6638CWE-190

Integer Overflow Vulnerability Reading TDMS Files in LabVIEW

Medium · published July 22, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
4.6
In the wild
Unconfirmed
What it is

An integer overflow vulnerability due to improper input validation when reading TDMS files in LabVIEW may result in an infinite loop. Successful exploitation requires an attacker to provide a user with a specially crafted TDMS file. This vulnerability affects LabVIEW 2024 Q1 and prior versions.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00158 · 4.6th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2024-07-22T19:55Z
EPSS history
Timeline
  • 22 JUL 19:55Z
    Integer Overflow Vulnerability Reading TDMS Files in LabVIEW
    cvelistv5