CVE-2025-64469CWE-121

CVE-2025-64469

High Β· published December 18, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
5.3
In the wild
Unconfirmed
What it is

⚑ A stack-based buffer overflow lurks in NI LabVIEW, but it only strikes if a user opens a corrupted VI file β€” like a hidden trapdoor that opens unexpectedly! πŸ”₯ Think of it like a faulty package delivery system: if the wrong address label is scanned, it can lead to delivering sensitive items to the wrong place. An attacker can exploit this buffer overflow if they trick someone into opening that corrupted file! If exploited, this vulnerability could lead to information disclosure or even allow arbitrary code execution. This means an attacker could potentially run malicious code on the system, putting sensitive data at risk and compromising user safety. The stakes are high, and your users should be cautious!

Put simply

Think of it like a faulty package delivery system: if the wrong address label is scanned, it can lead to delivering sensitive items to the wrong place. An attacker can exploit this buffer overflow if they trick someone into opening that corrupted file! The stack-based buffer overflow occurs in NI LabVIEW's LVResFile::FindRsrcListEntry() when it parses a corrupted VI file, allowing an attacker to manipulate memory and execute arbitrary code.

What to do

If exploited, this vulnerability could lead to information disclosure or even allow arbitrary code execution. This means an attacker could potentially run malicious code on the system, putting sensitive data at risk and compromising user safety. The stakes are high, and your users should be cautious! To mitigate this risk, it is crucial to update NI LabVIEW to the latest version beyond 2025 Q3 (25.3). Educate users on the dangers of opening unknown or suspicious VI files to prevent exploitation of this vulnerability. You've got this! Stay vigilant, keep your systems updated, and you'll protect your environment like a pro! πŸ›‘οΈ

The record
Technical detail
CVSS v3.1
7.8 Β· HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00164 Β· 5.3th percentile
Weakness
CWE-121 Β· Stack-based Buffer Overflow
Published
2025-12-18T20:15Z
Affected products (31)
ProductVersionsFixed in
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
ni/labviewall versionsβ€”
References (1)
EPSS history
Timeline
  • 18 DEC 14:53Z
    Stack-based Buffer Overflow inΒ LVResource::DetachResource()Β in NI LabVIEW
    cvelistv5