CVE-2025-64462CWE-125

CVE-2025-64462

High Β· published December 18, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
5.0
In the wild
Unconfirmed
What it is

🚨 A corrupted VI file could be your ticket to a world of trouble! An out-of-bounds read in NI LabVIEW means that just opening a specially crafted file could lead to serious information leaks or even arbitrary code execution! ⚠️ Think of it like receiving a gift-wrapped package that looks harmless on the outside but contains a ticking time bomb insideβ€”once you unwrap and open it, things can go south in no time! πŸŽπŸ’£ An attacker could exploit this vulnerability to read sensitive information from the memory or execute arbitrary code on the system, potentially leading to a complete system compromise. With the right push, they could gain unauthorized access to critical resources, presenting an absolute nightmare for your data security! πŸ”₯

Put simply

Think of it like receiving a gift-wrapped package that looks harmless on the outside but contains a ticking time bomb insideβ€”once you unwrap and open it, things can go south in no time! πŸŽπŸ’£ This vulnerability arises in the LVResFile::RGetMemFileHandle() function, where an out-of-bounds read occurs while processing a corrupted VI file, allowing attackers to manipulate memory improperly.

What to do

An attacker could exploit this vulnerability to read sensitive information from the memory or execute arbitrary code on the system, potentially leading to a complete system compromise. With the right push, they could gain unauthorized access to critical resources, presenting an absolute nightmare for your data security! πŸ”₯ To protect yourself, update to NI LabVIEW 2025 Q4 (25.4) or later immediately. Additionally, avoid opening any untrusted or suspicious VI files to minimize risk. Regularly review and audit user permissions to tighten security further! πŸ›‘οΈ You've got this! Stay proactive, follow these steps, and you'll have your system secured in no time! πŸ’ͺ✨

The record
Technical detail
CVSS v3.1
7.8 Β· HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00161 Β· 5.0th percentile
Weakness
CWE-125 Β· Out-of-bounds Read
Published
2025-12-18T20:15Z
Affected products (31)
ProductVersionsFixed in
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
References (1)
EPSS history
Timeline
  • 18 DEC 14:25Z
    Out-of-Bounds Read inΒ LVResFile::RGetMemFileHandle() in NI LabVIEW
    cvelistv5