CVE-2026-64203: Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI
Published Aug 25, 2026
·Updated
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.
Affected Software
36 affected components
NI LabVIEW<26.3.0
NI LabVIEW<=2022
NI LabVIEW=2023-q1
NI LabVIEW=2023-q3
NI LabVIEW=2023-q3_patch1
NI LabVIEW=2023-q3_patch2
NI LabVIEW=2023-q3_patch3
NI LabVIEW=2023-q3_patch4
NI LabVIEW=2023-q3_patch5
NI LabVIEW=2023-q3_patch6
NI LabVIEW=2023-q3_patch7
NI LabVIEW=2023-q3_patch8
NI LabVIEW=2023-q3_patch9
NI LabVIEW=2024
NI LabVIEW=2024-q1
NI LabVIEW=2024-q1_patch1
NI LabVIEW=2024-q3
NI LabVIEW=2024-q3_patch1
NI LabVIEW=2024-q3_patch2
NI LabVIEW=2024-q3_patch3
NI LabVIEW=2024-q3_patch4
NI LabVIEW=2024-q3_patch5
NI LabVIEW=2024-q3_patch6
NI LabVIEW=2025-q1
NI LabVIEW=2025-q1_patch1
NI LabVIEW=2025-q1_patch2
NI LabVIEW=2025-q1_patch3
NI LabVIEW=2025-q3
NI LabVIEW=2025-q3_patch1
NI LabVIEW=2025-q3_patch2
NI LabVIEW=2025-q3_patch3
NI LabVIEW=2025-q3_patch4
NI LabVIEW=2026-q1
NI LabVIEW=2026-q1_patch1
NI LabVIEW=2026-q1_patch2
NI LabVIEW=2026-q3
Remediation
Event History
Aug 25, 2026
CVE Published
via MITRE·04:48 PM
Data Sourced
via MITRE·04:48 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:17 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
Which installations are within the affected version range?
NI LabVIEW 2026 Q3 (26.3.0) and all prior versions are affected.
2
Can this be exploited without a user opening a file?
No. Exploitation requires the attacker to persuade a user to open a specially crafted VI.
3
Does an attacker need an account or elevated privileges to exploit this issue?
No privileges are required according to the provided vector. However, the attack is local and depends on user interaction to open the malicious VI.