CVE-2024-12740
HIGH
MEDIUM
Priority: 0.01
BB Relevance:
41/100
Published: 2025-01-27
Modified: 2026-11-11
First seen: 2026-11-11
Status: active
Attack Surface
Low Complexity
No Auth
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
None
UI:
Required
S:
Unchanged
C:
High
I:
High
A:
High
Description
Vision-related software from NI used a third-party library for image processing that exposes several vulnerabilities. These vulnerabilities may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted file.
Weakness Classification (1)
Affected Software (7)
| Vendor | Product | Version |
|---|---|---|
| NI | Data Record AD | 0 |
| NI | FRC Game Tools | 0 |
| NI | FlexRIO | 0 < 25.0.0 |
| NI | NI-IMAQdx | 0 |
| NI | Vision Acquisition Software | 0 |
| NI | Vision Builder for Automated Inspection | 0 < 24.0.0 |
| NI | Vision Development Module | 0 < 25.0.0 |