CVE-2024-10495: high-severity vulnerability in NI LabVIEW
Out of bounds read when loading the font table in fontmgr.cpp in NI LabVIEW
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.4epss 0.2%
An out of bounds read due to improper input validation when loading the font table in fontmgr.cpp in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q3 and prior versions.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N
Affected products
NI · LabVIEWRelated CVEs — NI LabVIEW
In the same product, most dangerous first.
CVE-2025-7848HIGHMissing input check in lvpict.cpp used in NI LabVIEWEPSS 6.1%CVE-2025-12097HIGHRelative Path Traversal Vulnerability in NI System Web ServerEPSS 0.7%CVE-2024-23612HIGHImproper Error Handling Issue in LabVIEWEPSS 0.6%CVE-2024-23611HIGHOut of Bounds Write Due to Missing Bounds Check in LabVIEWEPSS 0.6%CVE-2024-23609HIGHImproper Error Handling Issue in LabVIEWEPSS 0.6%CVE-2024-23610HIGHOut of Bounds Write Due to Missing Bounds Check in LabVIEWEPSS 0.6%