National Instruments LabView

CISA published an advisory about nine vulnerabilities in National Instruments LabVIEW affecting versions 2021-2025. All vulnerabilities have a CVSS score of 7.8 (HIGH) and allow attackers to execute arbitrary code or disclose information through specially crafted VI files. The vulnerabilities include out-of-bounds write, out-of-bounds read, use-after-free, and stack-based buffer overflow issues. Exploitation requires user interaction to open a corrupted VI file. Patches are available for versions 2022-2025, while version 2021 is no longer supported. The software is used worldwide in critical infrastructure sectors including manufacturing, defense, IT, and transportation systems.