CVE-2026-48141

Summary

There is a memory leak in NI grpc-device BeginSidebandStream that may result in denial of service due to memory exhaustion.  This affects NI grpc-device 2.17.0 and prior versions.

Affected Software

Weaknesses

• CWE-401: CWE-401 Missing release of memory after effective lifetime

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/multiple-vulnerabilities-in-ni-grpc-device-server.html
• https://github.com/ni/grpc-device/security/advisories/GHSA-j4qc-5v3f-rf87

• ←Previous
• Next→