CVE-2025-30420: high-severity vulnerability in NI Circuit Design Suite
Out of Bounds Read in Bitmap::InternalDraw() in NI Circuit Design Suite
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.5epss 0.2%
There is a memory corruption vulnerability due to an out of bounds read in Bitmap::InternalDraw() when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .sym file. This vulnerability affects NI Circuit Design Suite 14.3.0 and prior versions.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
NI · Circuit Design SuiteRelated CVEs — NI Circuit Design Suite
In the same product, most dangerous first.
CVE-2025-30421HIGHStack-based Buffer Overflow in DrObjectStorage::XML_Serialize() in NI Circuit Design SuiteEPSS 0.2%CVE-2025-30419HIGHOut of Bounds Read in GetSymbolBorderRectSize() in NI Circuit Design SuiteEPSS 0.2%CVE-2025-30418HIGHOut of Bounds Write in CheckPins() in NI Circuit Design SuiteEPSS 0.2%CVE-2025-30417HIGHOut of Bounds Write in Library!DecodeBase64() in NI Circuit Design SuiteEPSS 0.2%CVE-2025-6033HIGHMemory Corruption issue in XML_Serialize() in NI Circuit Design SuiteEPSS 0.2%CVE-2025-6034HIGHOut of Bounds Read in DefaultFontOptions() in NI Circuit Design SuiteEPSS 0.2%