CVE-2024-23608: high-severity vulnerability in NI LabVIEW
Out of Bounds Write Due to Missing Bounds Check in LabVIEW
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
LabVIEW has a flaw that allows writing data outside memory boundaries when processing specially crafted files, which could let attackers run malicious code if a user opens a compromised VI file.
An out-of-bounds write vulnerability due to missing bounds validation in LabVIEW allows remote code execution. The attack vector requires social engineering to deliver a malicious VI file; upon user execution, memory corruption occurs enabling arbitrary code execution. Affected versions: LabVIEW 2024 Q1 and prior.
In the same product, most dangerous first.