CVE-2025-6034: Out of Bounds Read in DefaultFontOptions() in NI Circuit Design Suite
There is a memory corruption vulnerability due to an out of bounds read in DefaultFontOptions() when using SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .sym file. This vulnerability affects NI Circuit Design Suite 14.3.1 and prior versions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6034?
CVE-2025-6034 is classified as a critical memory corruption vulnerability that can lead to information disclosure or arbitrary code execution.
How do I fix CVE-2025-6034?
To fix CVE-2025-6034, update the NI Circuit Design Suite to version 14.3.1 or later.
What software is affected by CVE-2025-6034?
CVE-2025-6034 affects NI Circuit Design Suite versions up to 14.3.1.
What is the impact of exploiting CVE-2025-6034?
Exploitation of CVE-2025-6034 can lead to memory corruption, potentially allowing attackers to execute arbitrary code or disclose sensitive information.
Can CVE-2025-6034 be exploited remotely?
Yes, exploitation of CVE-2025-6034 could be performed remotely if an attacker can manipulate the DefaultFontOptions() function using SymbolEditor.