VULNERABILITY INTELLIGENCE

CVE-2026-18444

CVSS score6.6 MEDIUM
EPSS probability0.18%
CISA KEVNot currently listed
Published2026-08-25
Last modified2026-09-08
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Description

There is an integer conversion vulnerability resulting in an out-of-bounds read when loading images recently discovered in NI LabVIEW.  This may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI file.  This vulnerability affects NI LabVIEW 2026 Q3 and prior versions.

Weakness classification

  • security@ni.com: CWE-195

Primary references