CVE-2025-64461CWE-787

Out of Bounds Write in mgocre_SH_25_3!RevBL() in NI LabVIEW

High · published December 18, 2025

CVSS v4.0
8.5
EPSS
0%
Percentile
5.0
In the wild
Unconfirmed
What it is

⚡ An out-of-bounds write vulnerability in NI LabVIEW could let attackers run arbitrary code using a corrupted file! Just think about the potential chaos! 🔥 This vulnerability is like a chef who accidentally spills a recipe on the floor and assumes it's all fine — without checking, they might serve a dish no one wants. Similarly, if a user opens a corrupted VI file, they could unwittingly unleash harmful code! If exploited, an attacker could gain unauthorized access to sensitive information or even take full control of the system, unleashing havoc and potentially damaging vital processes. The thought of someone manipulating your system remotely? Absolutely devastating!

Put simply

This vulnerability is like a chef who accidentally spills a recipe on the floor and assumes it's all fine — without checking, they might serve a dish no one wants. Similarly, if a user opens a corrupted VI file, they could unwittingly unleash harmful code! This out-of-bounds write flaw occurs in the function mgocre_SH_25_3!RevBL() when processing corrupted Virtual Instrument (VI) files, allowing an attacker to execute malicious code if a user opens such a file.

What to do

If exploited, an attacker could gain unauthorized access to sensitive information or even take full control of the system, unleashing havoc and potentially damaging vital processes. The thought of someone manipulating your system remotely? Absolutely devastating! To protect your systems, ensure all users are updated to NI LabVIEW version 2025 Q4 (25.4) or later, and educate users to be cautious of unexpected VI files. Implement strict file validation to reduce risks further! This is fixable! Update your software now and tighten your security measures—you've got this! 🛡️

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00161 · 5.0th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-12-18T14:21Z
EPSS history
Timeline
  • 18 DEC 14:21Z
    Out of Bounds Write in mgocre_SH_25_3!RevBL() in NI LabVIEW
    cvelistv5