There is an integer conversion vulnerability resulting in an out-of-bounds read when loading images recently discovered in NI LabVIEW. This may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI file. This vulnerability affects NI LabVIEW 2026 Q3 and prior versions.
CVE-2026-18444
CVSS base score
6.6 (v3.1)
Severity
MEDIUM
Attack vector
Local
Weakness
CWE-195
Last modified
November 3, 2026
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
Affected products
ni labview
References
- www.ni.com Patch, Vendor Advisory