CVE-2025-2634 — Improper Validation of Specified Index, Position, or Offset in Input in Labview

CWE-1285 — Improper Validation of Specified Index, Position, or Offset in Input6 documents6 sources

Severity

7.3HIGHNVD

EPSS

0.0%

top 90.57%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

NI Labview Linux Kernel

Timeline

PublishedJul 23

Latest updateJan 13

Description

Out of bounds read vulnerability due to improper bounds checking in NI LabVIEW in fontmgr may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q1 and prior versions.

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages3 packages

▶CVEListV5ni/labview25.0.0 — 25.3.0+2

▶NVDni/labview2021+4

▶Linuxlinux/linux_kernel5.6.0 — 6.1.160+3

🔴Vulnerability Details

OSV

f2fs: fix to avoid updating compression context during writeback↗2026-01-13

▶

GHSA

GHSA-rxm7-9j9m-hc3w: Out of bounds read vulnerability due to improper bounds checking in NI LabVIEW in fontmgr may result in information disclosure or arbitrary code execu↗2025-07-23

▶

📋Vendor Advisories

CISA ICS

National Instruments LabVIEW↗2025-07-29

▶