CVE-2025-64467CWE-125

CVE-2025-64467

High Β· published December 18, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
5.0
In the wild
Unconfirmed
What it is

🚨 Out of bounds reads can sneak right past your defenses! NI LabVIEW's parsing of a corrupted VI file has a vulnerability that could let attackers slip in with malicious code, if only you open the wrong file. ⚑ Think of it like a waiter serving a dish that looks perfect but is actually filled with something unexpected, like glass shards inside a dessert. Opening a corrupted VI file is the same β€” you might think you're diving into a tasty treat, but you could end up with a nasty surprise! An attacker could potentially gain access to sensitive information or execute arbitrary code simply by enticing you to open a specially crafted VI file. This could lead to a devastating breach of security, compromising your system and data integrity.

Put simply

Think of it like a waiter serving a dish that looks perfect but is actually filled with something unexpected, like glass shards inside a dessert. Opening a corrupted VI file is the same β€” you might think you're diving into a tasty treat, but you could end up with a nasty surprise! This out-of-bounds read vulnerability in NI LabVIEW occurs during the parsing of corrupted VI files through the LVResFile::FindRsrcListEntry() method, allowing attackers to manipulate memory and execute unwanted code.

What to do

An attacker could potentially gain access to sensitive information or execute arbitrary code simply by enticing you to open a specially crafted VI file. This could lead to a devastating breach of security, compromising your system and data integrity. To protect yourself, ensure you update to NI LabVIEW 2025 Q4 (25.4) or later to resolve this issue. Additionally, educate users on the risks of opening unknown or untrusted VI files to minimize exploitation risk. You've got this! Stay proactive and secure your systems, and soon you’ll be the hero of your digital domain! πŸ›‘οΈ

The record
Technical detail
CVSS v3.1
7.8 Β· HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00161 Β· 5.0th percentile
Weakness
CWE-125 Β· Out-of-bounds Read
Published
2025-12-18T20:15Z
Affected products (31)
ProductVersionsFixed in
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
References (1)
EPSS history
Timeline
  • 18 DEC 14:40Z
    Out-of-Bounds Read inΒ LVResFile::FindRsrcListEntry()Β in NI LabVIEW
    cvelistv5