CVE-2025-64468

Summary

There is a use-after-free vulnerability in sentry!sentry_span_set_data() when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q3 (25.3) and prior versions

Affected Software

VendorProductVersion RangeStatus
NILabVIEW0 <= 22.3.6affected
NILabVIEW23.1.0 <= 23.3.7affected
NILabVIEW24.1.0 <= 24.3.4affected
NILabVIEW25.1.0 <= 25.3.2affected

Weaknesses

  • CWE-416: CWE-416 Use After Free

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References