ZDI-25-769: NI LabVIEW VI File Parsing Memory Corruption Remote Code Execution Vulnerability

Published Aug 1, 2025

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NI LabVIEW. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-7849.

Affected Software

1 affected component

National Instruments LabVIEW

Event History

Aug 1, 2025

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-25-769?

ZDI-25-769 has a CVSS rating of 7.8, indicating a high severity vulnerability.

How do I fix ZDI-25-769?

To fix ZDI-25-769, ensure that you update to the latest version of NI LabVIEW as provided by National Instruments.

What type of attacks can be executed through ZDI-25-769?

ZDI-25-769 allows remote attackers to execute arbitrary code on affected installations of NI LabVIEW.

Is user interaction required to exploit ZDI-25-769?

Yes, user interaction is required for ZDI-25-769 as the target must visit a malicious page or open a malicious file.

Which software is affected by ZDI-25-769?

ZDI-25-769 affects installations of National Instruments LabVIEW.