CVE-2026-9143CWE-681

Incorrect Conversion between Numeric Types in NI grpc-device due to missing range checks in CodeGen

Medium · published June 19, 2026

CVSS v4.0
6.3
EPSS
0%
Percentile
21.6
In the wild
Unconfirmed
What it is

There is an incorrect conversion between numeric types vulnerability in NI grpc-device due to missing range checks in CodeGen.  This may silently discard high bits if a size value exceeded the target type's range. This affects NI grpc-device 2.17.0 and prior versions.

The record
Technical detail
CVSS v4.0
6.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00301 · 21.6th percentile
Weakness
CWE-681 · Incorrect Conversion between Numeric Types
Published
2026-06-19T13:48Z
EPSS history
Timeline
  • 19 JUN 13:48Z
    Incorrect Conversion between Numeric Types in NI grpc-device due to missing range checks in CodeGen
    cvelistv5