CVE-2025-30417: Out of Bounds Write in Library!DecodeBase64() in NI Circuit Design Suite
First published: Thu May 15 2025(Updated: )
There is a memory corruption vulnerability due to an out of bounds write in Library!DecodeBase64() when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .sym file. This vulnerability affects NI Circuit Design Suite 14.3.0 and prior versions.
Credit: security@ni.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NI Circuit Design Suite | <14.3.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2025-30417?
CVE-2025-30417 has a high severity rating due to the potential for arbitrary code execution and information disclosure.
How do I fix CVE-2025-30417?
To fix CVE-2025-30417, update to the latest version of NI Circuit Design Suite that addresses the memory corruption vulnerability.
What software is affected by CVE-2025-30417?
CVE-2025-30417 affects NI Circuit Design Suite versions prior to 14.3.0.
What is the impact of CVE-2025-30417?
Successful exploitation of CVE-2025-30417 can lead to information disclosure or arbitrary code execution.
How can I mitigate CVE-2025-30417?
Mitigation for CVE-2025-30417 involves applying security patches and updates provided by NI to protect against the vulnerability.
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/references
- agent/title
- agent/type
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/severity
- agent/source
- agent/author
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- vendor/ni
- canonical/ni circuit design suite