Vulnerability-Lookup

FKIE_CVE-2026-32860

Vulnerability from fkie_nvd - Published: 2026-04-07 20:16 - Updated: 2026-04-13 14:55

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted LVLIB file in NI LabVIEW. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .lvlib file. This vulnerability affects NI LabVIEW 2026 Q1 (26.1.0) and prior versions.

References

	URL	Tags
	security@ni.com	https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/lv-project-library-file-parsing-memory-corruption-vulnerability-in-ni-labview.html	Vendor Advisory

Impacted products

Vendor	Product	Version
ni	labview	*
ni	labview	2023
ni	labview	2023
ni	labview	2023
ni	labview	2023
ni	labview	2023
ni	labview	2023
ni	labview	2023
ni	labview	2023
ni	labview	2023
ni	labview	2023
ni	labview	2024
ni	labview	2024
ni	labview	2024
ni	labview	2024
ni	labview	2024
ni	labview	2024
ni	labview	2024
ni	labview	2024
ni	labview	2024
ni	labview	2025
ni	labview	2025
ni	labview	2025
ni	labview	2025
ni	labview	2025
ni	labview	2025
ni	labview	2025
ni	labview	2025
ni	labview	2026

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ni:labview:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2E2E0B40-5E0A-47F8-8A1A-FEF10C1CA4EF",
              "versionEndIncluding": "2022",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ni:labview:2023:q1:*:*:*:*:*:*",
              "matchCriteriaId": "D7DD2022-CFB7-4F38-B459-C1AFB55B5B68",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ni:labview:2023:q3:*:*:*:*:*:*",
              "matchCriteriaId": "18AB0B07-72FE-4861-B69D-AD2E87C5382E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ni:labview:2023:q3_patch1:*:*:*:*:*:*",
              "matchCriteriaId": "91928C9C-F094-4EE4-9FBE-2B7956D68E6F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ni:labview:2023:q3_patch2:*:*:*:*:*:*",
              "matchCriteriaId": "044C4B51-C641-41F2-ACA0-834C99D63285",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ni:labview:2023:q3_patch3:*:*:*:*:*:*",
              "matchCriteriaId": "26EEE5E3-AD37-4832-A66C-5F8F7A478F30",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ni:labview:2023:q3_patch4:*:*:*:*:*:*",
              "matchCriteriaId": "5DC20B17-C582-42C4-9780-5DC61B4AED91",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ni:labview:2023:q3_patch5:*:*:*:*:*:*",
              "matchCriteriaId": "329575A0-F12E-478B-9A83-F747D6A161AA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ni:labview:2023:q3_patch6:*:*:*:*:*:*",
              "matchCriteriaId": "F25A1816-08CA-4467-8025-AD57562D7C35",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ni:labview:2023:q3_patch7:*:*:*:*:*:*",
              "matchCriteriaId": "B282A345-3513-42FE-86C7-B38EA401CE7C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ni:labview:2023:q3_patch8:*:*:*:*:*:*",
              "matchCriteriaId": "90B91B54-D198-4810-8696-33C66EFBCC14",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ni:labview:2024:-:*:*:*:*:*:*",
              "matchCriteriaId": "2619FCBC-4CE0-46D6-8536-CC68374CCFA4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ni:labview:2024:q1:*:*:*:*:*:*",
              "matchCriteriaId": "7753CCDF-BAF8-4F91-B85B-EBB2B88F6F30",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ni:labview:2024:q1_patch1:*:*:*:*:*:*",
              "matchCriteriaId": "953E8FD0-4420-4592-B696-C377D4EE0CA2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ni:labview:2024:q3:*:*:*:*:*:*",
              "matchCriteriaId": "5D99DCCD-511E-482E-8307-24382D1B621B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ni:labview:2024:q3_patch1:*:*:*:*:*:*",
              "matchCriteriaId": "600A4905-B888-454F-9DF6-1C09FB71DBE2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ni:labview:2024:q3_patch2:*:*:*:*:*:*",
              "matchCriteriaId": "AD79D082-AFF5-42CB-9D6C-12CF9A59D205",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ni:labview:2024:q3_patch3:*:*:*:*:*:*",
              "matchCriteriaId": "3B759A99-F766-4FE4-A1FF-A2D5026A6BD9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ni:labview:2024:q3_patch4:*:*:*:*:*:*",
              "matchCriteriaId": "BC3DC6DA-16FA-443D-B050-23CB7EC6602E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ni:labview:2024:q3_patch5:*:*:*:*:*:*",
              "matchCriteriaId": "68F532A2-A27F-4B45-9F87-271C3F485D4F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ni:labview:2025:q1:*:*:*:*:*:*",
              "matchCriteriaId": "FB0991CF-642F-46D2-9C47-9540347DC074",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ni:labview:2025:q1_patch1:*:*:*:*:*:*",
              "matchCriteriaId": "D776E6DE-2635-4172-B08D-B7FB2D1048F9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ni:labview:2025:q1_patch2:*:*:*:*:*:*",
              "matchCriteriaId": "55237E7D-9149-4204-A8FE-354CD2BC1220",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ni:labview:2025:q1_patch3:*:*:*:*:*:*",
              "matchCriteriaId": "FCD3C5B7-0060-453E-BA84-5FCA1BCF862C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ni:labview:2025:q3:*:*:*:*:*:*",
              "matchCriteriaId": "2687359A-8469-4E4A-A0BA-0AC6CFDD0344",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ni:labview:2025:q3_patch1:*:*:*:*:*:*",
              "matchCriteriaId": "4D80D557-E4E0-4EDD-95EC-6BA679C5E018",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ni:labview:2025:q3_patch2:*:*:*:*:*:*",
              "matchCriteriaId": "93777929-90AB-4B5C-946B-7052B9DE91C6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ni:labview:2025:q3_patch3:*:*:*:*:*:*",
              "matchCriteriaId": "AC216B7F-07E3-449D-A968-12086309661F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ni:labview:2026:q1:*:*:*:*:*:*",
              "matchCriteriaId": "369376E8-F328-4D36-818A-08364E43C2CD",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted LVLIB file in NI LabVIEW.\u00a0 This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .lvlib file. This vulnerability affects NI LabVIEW 2026 Q1 (26.1.0) and prior versions."
    }
  ],
  "id": "CVE-2026-32860",
  "lastModified": "2026-04-13T14:55:52.147",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "security@ni.com",
        "type": "Secondary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "LOCAL",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 8.5,
          "baseSeverity": "HIGH",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "NONE",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "PASSIVE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "HIGH",
          "vulnConfidentialityImpact": "HIGH",
          "vulnIntegrityImpact": "HIGH",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "security@ni.com",
        "type": "Secondary"
      }
    ]
  },
  "published": "2026-04-07T20:16:24.040",
  "references": [
    {
      "source": "security@ni.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/lv-project-library-file-parsing-memory-corruption-vulnerability-in-ni-labview.html"
    }
  ],
  "sourceIdentifier": "security@ni.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "security@ni.com",
      "type": "Secondary"
    }
  ]
}

CVE-2026-32860 (GCVE-0-2026-32860)

Vulnerability from cvelistv5 – Published: 2026-04-07 19:42 – Updated: 2026-04-08 03:55

Title

Out-of-Bounds Write Vulnerability in NI LabVIEW when loading lvlib file

Summary

Severity ?

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.5 (High)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CWE

CWE-787 - - Out of Bounds Write

Assigner

References

URL

Tags

https://www.ni.com/en/support/security/available-…

Impacted products

	Vendor	Product	Version
	NI	LabVIEW	Affected: 0 , < 23.0.0 (semver) Affected: 23.1.0 , < 23.3.9 (semver) Affected: 24.1.0 , < 24.3.6 (semver) Affected: 25.1.0 , < 25.3.4 (semver) Affected: 26.1.0 , < 26.1.1 (semver)

Credits

Rocco Calvi (@TecR0c) with TecSecurity TrendAI Zero Day Initiative

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-32860",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-07T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-08T03:55:57.909Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "LabVIEW",
          "vendor": "NI",
          "versions": [
            {
              "lessThan": "23.0.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "23.3.9",
              "status": "affected",
              "version": "23.1.0",
              "versionType": "semver"
            },
            {
              "lessThan": "24.3.6",
              "status": "affected",
              "version": "24.1.0",
              "versionType": "semver"
            },
            {
              "lessThan": "25.3.4",
              "status": "affected",
              "version": "25.1.0",
              "versionType": "semver"
            },
            {
              "lessThan": "26.1.1",
              "status": "affected",
              "version": "26.1.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:ni:labview:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "23.0.0",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:ni:labview:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "23.3.9",
                  "versionStartIncluding": "23.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:ni:labview:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "24.3.6",
                  "versionStartIncluding": "24.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:ni:labview:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "25.3.4",
                  "versionStartIncluding": "25.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:ni:labview:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "26.1.1",
                  "versionStartIncluding": "26.1.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Rocco Calvi (@TecR0c) with TecSecurity"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "TrendAI Zero Day Initiative"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eThere is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted LVLIB file in NI LabVIEW.\u0026nbsp; This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .lvlib file. This vulnerability affects NI LabVIEW 2026 Q1 (26.1.0) and prior versions.\u0026nbsp;\u003c/p\u003e"
            }
          ],
          "value": "There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted LVLIB file in NI LabVIEW.\u00a0 This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .lvlib file. This vulnerability affects NI LabVIEW 2026 Q1 (26.1.0) and prior versions."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-100",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-100 Overflow Buffers"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787\u00a0- Out of Bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-07T19:42:36.167Z",
        "orgId": "bca5b2e8-03a4-4781-b4ca-c6a078c0bfd4",
        "shortName": "NI"
      },
      "references": [
        {
          "url": "https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/lv-project-library-file-parsing-memory-corruption-vulnerability-in-ni-labview.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Out-of-Bounds Write Vulnerability in NI LabVIEW when loading lvlib file",
      "x_generator": {
        "engine": "Vulnogram 1.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "bca5b2e8-03a4-4781-b4ca-c6a078c0bfd4",
    "assignerShortName": "NI",
    "cveId": "CVE-2026-32860",
    "datePublished": "2026-04-07T19:42:36.167Z",
    "dateReserved": "2026-03-16T20:29:24.840Z",
    "dateUpdated": "2026-04-08T03:55:57.909Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

FKIE_CVE-2026-32860

CVE-2026-32860 (GCVE-0-2026-32860)

Tags

Sightings

Nomenclature