CVE-2026-18444
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
38/100
Published: 2026-08-25
Modified: 2026-11-04
First seen: 2026-11-03
Status: active
Attack Surface
Low Complexity
No Auth
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
None
UI:
Required
S:
Unchanged
C:
Low
I:
Low
A:
High
Description
There is an integer conversion vulnerability resulting in an out-of-bounds read when loading images recently discovered in NI LabVIEW. This may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI file. This vulnerability affects NI LabVIEW 2026 Q3 and prior versions.
Weakness Classification (1)
Affected Software (45)
| Vendor | Product | Version |
|---|---|---|
| NI | LabVIEW | 0 < 23.0.0 |
| NI | LabVIEW | 23.1.0 < 23.3.10 |
| NI | LabVIEW | 24.1.0 < 24.3.7 |
| NI | LabVIEW | 25.1.0 < 25.3.5 |
| NI | LabVIEW | 26.1.0 < 26.3.1 |
| NI | LabVIEW | 0 < 23.0.0 |
| NI | LabVIEW | 23.1.0 < 23.3.10 |
| NI | LabVIEW | 24.1.0 < 24.3.7 |
| NI | LabVIEW | 25.1.0 < 25.3.5 |
| NI | LabVIEW | 26.1.0 < 26.3.1 |
| ni | labview | < 2022 |
| ni | labview | 2023 |
| ni | labview | 2023 |
| ni | labview | 2023 |
| ni | labview | 2023 |
| ni | labview | 2023 |
| ni | labview | 2023 |
| ni | labview | 2023 |
| ni | labview | 2023 |
| ni | labview | 2023 |
| ni | labview | 2023 |
| ni | labview | 2023 |
| ni | labview | 2024 |
| ni | labview | 2024 |
| ni | labview | 2024 |
| ni | labview | 2024 |
| ni | labview | 2024 |
| ni | labview | 2024 |
| ni | labview | 2024 |
| ni | labview | 2024 |
Showing 30 of 45 entries