CVE-2024-23611: high-severity vulnerability in NI LabVIEW
Out of Bounds Write Due to Missing Bounds Check in LabVIEW
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
LabVIEW has a flaw where it writes data outside allocated memory bounds, allowing an attacker to execute malicious code if you open a specially crafted file. This is dangerous because it gives attackers direct control over your computer.
An out-of-bounds write vulnerability exists due to missing bounds validation in LabVIEW's memory handling. The attack vector requires user interaction (opening a malicious VI file), but upon successful exploitation, arbitrary code execution is achieved with the privileges of the LabVIEW process. Affected versions include LabVIEW 2024 Q1 and earlier.
In the same product, most dangerous first.