CVE-2025-64468CWE-416

Use-after-Free in sentry!sentry_span_set_data() in NI LabVIEW

High · published December 18, 2025

CVSS v4.0
8.5
EPSS
0%
Percentile
5.0
In the wild
Unconfirmed
What it is

⚡ A use-after-free bug in NI LabVIEW could let attackers execute arbitrary code! Just one corrupted VI file, and it’s game on for your system. 🔥 Think of it like a chef using a recipe that’s missing a crucial step — the dish could end up unappetizing or, worse, inedible. In this case, the corrupted VI file is the recipe causing unexpected behavior and danger! If a crafty attacker manages to get you to open a corrupted VI file, they could extract sensitive data or even execute code of their choosing on your system. That’s a recipe for disaster, potentially compromising entire projects!

Put simply

Think of it like a chef using a recipe that’s missing a crucial step — the dish could end up unappetizing or, worse, inedible. In this case, the corrupted VI file is the recipe causing unexpected behavior and danger! This vulnerability involves a use-after-free condition in the function sentry!sentry_span_set_data() when handling a corrupted VI file. By manipulating memory allocation, attackers can gain control over the execution flow of the application.

What to do

If a crafty attacker manages to get you to open a corrupted VI file, they could extract sensitive data or even execute code of their choosing on your system. That’s a recipe for disaster, potentially compromising entire projects! To safeguard your systems, update NI LabVIEW to version 25.3.1 or later immediately. Always be cautious about opening files from untrusted sources and consider implementing additional security measures like file validation. 🛡️ You’ve got this! Stay proactive, and you’ll keep your systems safe and sound! 💪✨

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00161 · 5.0th percentile
Weakness
CWE-416 · Use After Free
Published
2025-12-18T14:50Z
EPSS history
Timeline
  • 18 DEC 14:50Z
    Use-after-Free in sentry!sentry_span_set_data() in NI LabVIEW
    cvelistv5