CVE-2026-18444

There is an integer conversion vulnerability resulting in an out-of-bounds read when loading images recently discovered in NI LabVIEW.  This may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI file.  This vulnerability affects NI LabVIEW 2026 Q3 and prior versions.

CVSS base score
6.6 (v3.1)
Severity
MEDIUM
Attack vector
Local
Weakness
CWE-195
Last modified
November 3, 2026
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Affected products

ni labview

References

View full NVD advisory →

More ni vulnerabilities

Published the same day

← Back to CVE watch