NI Circuit Design Suite up to 14.3.1 SymbolEditor XML_Serialize out-of-bounds write

Summaryinfo

A vulnerability identified as critical has been detected in NI Circuit Design Suite up to 14.3.1. Impacted is the function XML_Serialize of the component SymbolEditor. This manipulation causes out-of-bounds write. The identification of this vulnerability is CVE-2025-6033. It is possible to initiate the attack remotely. There is no exploit available.

Detailsinfo

A vulnerability was found in NI Circuit Design Suite up to 14.3.1. It has been declared as critical. Affected by this vulnerability is the function XML_Serialize of the component SymbolEditor. The manipulation with an unknown input leads to a out-of-bounds write vulnerability. The CWE definition for the vulnerability is CWE-787. The product writes data past the end, or before the beginning, of the intended buffer. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

There is a memory corruption vulnerability due to an out of bounds write in XML_Serialize() when using SymbolEditor in NI Circuit Design Suite.  This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .sym file. This vulnerability affects NI Circuit Design Suite 14.3.1 and prior versions.

The weakness was shared by Michael Heinzl. It is possible to read the advisory at ni.com. This vulnerability is known as CVE-2025-6033 since 06/12/2025. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. It demands that the victim is doing some kind of user interaction. Technical details of the vulnerability are known, but there is no available exploit. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 09/30/2025).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2025-31746). Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• NI

Name

• Circuit Design Suite

Version

• 14.3.0
• 14.3.1

CPE 2.3info

• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion