CVE-2026-18445: Integer Overflow Vulnerability Resulting in an Out of Bounds Write in NI LabVIEW
There is an integer overflow vulnerability resulting in an out-of-bounds write recently discovered in NI LabVIEW. This may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI file. This vulnerability affects NI LabVIEW 2026 Q3 and prior versions.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Users of NI LabVIEW 2026 Q3 and earlier are affected. Exploitation depends on a user opening a specially crafted VI file.
What does an attacker need to exploit it?
The attacker needs to persuade or otherwise cause a user to open a malicious VI file. The supplied information does not indicate that authentication or prior access to the target system is required.
What could happen if exploitation succeeds?
Successful exploitation may cause information disclosure or arbitrary code execution. The vulnerability is an integer overflow that can result in an out-of-bounds write.