CVE-2026-18445

Published: Aug 25, 2026Modified: Sep 8, 2026

6.9

Vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: security@ni.com (Secondary)

Description

There is an integer overflow vulnerability resulting in an out-of-bounds write recently discovered in NI LabVIEW. This may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI file.  This vulnerability affects NI LabVIEW 2026 Q3 and prior versions.

Affected (35)

Products: Ni: Labview

1 product

Labview

Configuration A

35 vulnerable

Vulnerable Software	Affected Versions
Ni Labview	Up to 2022
Ni Labview	Version 2023 q1
Ni Labview	Version 2023 q3
Ni Labview	Version 2023 q3_patch1
Ni Labview	Version 2023 q3_patch2
Ni Labview	Version 2023 q3_patch3
Ni Labview	Version 2023 q3_patch4
Ni Labview	Version 2023 q3_patch5
Ni Labview	Version 2023 q3_patch6
Ni Labview	Version 2023 q3_patch7
Ni Labview	Version 2023 q3_patch8
Ni Labview	Version 2023 q3_patch9
Ni Labview	Version 2024
Ni Labview	Version 2024 q1
Ni Labview	Version 2024 q1_patch1
Ni Labview	Version 2024 q3
Ni Labview	Version 2024 q3_patch1
Ni Labview	Version 2024 q3_patch2
Ni Labview	Version 2024 q3_patch3
Ni Labview	Version 2024 q3_patch4
Ni Labview	Version 2024 q3_patch5
Ni Labview	Version 2024 q3_patch6
Ni Labview	Version 2025 q1
Ni Labview	Version 2025 q1_patch1
Ni Labview	Version 2025 q1_patch2
Ni Labview	Version 2025 q1_patch3
Ni Labview	Version 2025 q3
Ni Labview	Version 2025 q3_patch1
Ni Labview	Version 2025 q3_patch2
Ni Labview	Version 2025 q3_patch3
Ni Labview	Version 2025 q3_patch4
Ni Labview	Version 2026 q1
Ni Labview	Version 2026 q1_patch1
Ni Labview	Version 2026 q1_patch2
Ni Labview	Version 2026 q3

Related CWEs

CWE-190

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (1)

https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/integer-overflow-vulnerability-resulting-in-an-out-of-bounds-write-in-ni-labview.html

Source: security@ni.com

PatchVendor Advisory

Timeline

No history available yet.