CVE-2026-64203: Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI
Published Aug 25, 2026
·Updated
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 (26.3.0) and prior versions.
Affected Software
1 affected component
NI LabVIEW<26.3.0
Event History
Aug 25, 2026
CVE Published
via MITRE·04:48 PM
Data Sourced
via MITRE·04:48 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which installations are within the affected version range?
NI LabVIEW 2026 Q3 (26.3.0) and all prior versions are affected.
2
Can this be exploited without a user opening a file?
No. Exploitation requires the attacker to persuade a user to open a specially crafted VI.
3
Does an attacker need an account or elevated privileges to exploit this issue?
No privileges are required according to the provided vector. However, the attack is local and depends on user interaction to open the malicious VI.