CVE-2026-64204: CWE-787 Out-of-bounds write in NI LabVIEW

This vulnerability in NI LabVIEW involves an out-of-bounds write (CWE-787) that causes memory corruption. Successful exploitation requires user interaction by opening a malicious VI file, potentially allowing attackers to disclose information or execute arbitrary code with the privileges of the user. The CVSS v3.1 score is 7.8, indicating high severity with attack vector local, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability. Affected versions explicitly include 23.1.0, 24.1.0, 25.1.0, and 26.1.0, as well as all versions up to 26.3.0. No vendor advisory or patch information is provided, and no known exploits are reported in the wild.

If exploited, this vulnerability can lead to full compromise of the affected system by allowing arbitrary code execution or unauthorized disclosure of sensitive information. The attack requires local access and user interaction, limiting remote exploitation. The impact on confidentiality, integrity, and availability is high.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid opening VI files from untrusted sources to mitigate risk.