CVE-2025-7848

Summary

A memory corruption vulnerability due to improper input validation in lvpict.cpp exists in NI LabVIEW that may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q1 and prior versions.

Affected Software

VendorProductVersion RangeStatus
NILabVIEW0 <= 22.3.5affected
NILabVIEW23.0.0 <= 23.3.6affected
NILabVIEW24.0.0 <= 24.3.3affected
NILabVIEW25.0.0 < 25.3.0affected

Weaknesses

  • CWE-1285: CWE-1285 Improper Validation of Specified Index, Position, or Offset in Input

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References