CVE-2024-6638

Published: Jul 22, 2024Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

An integer overflow vulnerability due to improper input validation when reading TDMS files in LabVIEW may result in an infinite loop. Successful exploitation requires an attacker to provide a user with a specially crafted TDMS file. This vulnerability affects LabVIEW 2024 Q1 and prior versions.

Affected (13)

Products: Ni: Labview

1 product

Labview

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Ni Labview	Up to 2021
Ni Labview	Version 2022 q1
Ni Labview	Version 2022 q3
Ni Labview	Version 2022 q3_patch1
Ni Labview	Version 2022 q3_patch2
Ni Labview	Version 2023 q1
Ni Labview	Version 2023 q3
Ni Labview	Version 2023 q3_patch1
Ni Labview	Version 2023 q3_patch2
Ni Labview	Version 2023 q3_patch3
Ni Labview	Version 2023 q3_patch4
Ni Labview	Version 2024 q1
Ni Labview	Version 2024 q1_patch1

Related CWEs

CWE-190

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (2)

https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/integer-overflow-vulnerability-reading-tdms-files-in-labview.html

Source: security@ni.com

Vendor Advisory

https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/integer-overflow-vulnerability-reading-tdms-files-in-labview.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.