NI LabVIEW up to 26.3.0 integer overflow

Summaryinfo

A vulnerability classified as problematic was found in NI LabVIEW up to 22.x/23.3.9/24.3.6/25.3.4/26.3.0. This affects an unknown part. Executing a manipulation can lead to integer overflow. This vulnerability is tracked as CVE-2026-18445. The attack is restricted to local execution. No exploit exists.

Detailsinfo

A vulnerability has been found in NI LabVIEW up to 22.x/23.3.9/24.3.6/25.3.4/26.3.0 and classified as problematic. This vulnerability affects an unknown function. The manipulation with an unknown input leads to a integer overflow vulnerability. The CWE definition for the vulnerability is CWE-190. The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

There is an integer overflow vulnerability resulting in an out-of-bounds write recently discovered in NI LabVIEW.  This may result in information disclosure or arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted VI file.  This vulnerability affects NI LabVIEW 2026 Q3 and prior versions.

The advisory is available at ni.com. This vulnerability was named CVE-2026-18445 since 07/31/2026. The exploitation appears to be easy. Local access is required to approach this attack. Successful exploitation requires user interaction by the victim. The technical details are unknown and an exploit is not available.

Upgrading to version 23.0.0, 23.3.10, 24.3.7, 25.3.5 or 26.3.1 eliminates this vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Vendor

• NI

Name

• LabVIEW

Version

• 22.x
• 23.3.0
• 23.3.1
• 23.3.2
• 23.3.3
• 23.3.4
• 23.3.5
• 23.3.6
• 23.3.7
• 23.3.8
• 23.3.9
• 24.3.0
• 24.3.1
• 24.3.2
• 24.3.3
• 24.3.4
• 24.3.5
• 24.3.6
• 25.3.0
• 25.3.1
• 25.3.2
• 25.3.3
• 25.3.4
• 26.0
• 26.1
• 26.2
• 26.3.0

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion