CVE-2025-30421: fallo de gravedad alta en NI Circuit Design Suite
Stack-based Buffer Overflow in DrObjectStorage::XML_Serialize() in NI Circuit Design Suite
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 8.5epss 0.2%
There is a memory corruption vulnerability due to a stack-based buffer overflow in DrObjectStorage::XML_Serialize() when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .sym file. This vulnerability affects NI Circuit Design Suite 14.3.0 and prior versions.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
NI · Circuit Design SuiteCVEs relacionadas — NI Circuit Design Suite
En el mismo producto, de las más peligrosas a las menos.
CVE-2025-30420HIGHOut of Bounds Read in Bitmap::InternalDraw() in NI Circuit Design SuiteEPSS 0.2%CVE-2025-30419HIGHOut of Bounds Read in GetSymbolBorderRectSize() in NI Circuit Design SuiteEPSS 0.2%CVE-2025-30418HIGHOut of Bounds Write in CheckPins() in NI Circuit Design SuiteEPSS 0.2%CVE-2025-30417HIGHOut of Bounds Write in Library!DecodeBase64() in NI Circuit Design SuiteEPSS 0.2%CVE-2025-6033HIGHMemory Corruption issue in XML_Serialize() in NI Circuit Design SuiteEPSS 0.2%CVE-2025-6034HIGHOut of Bounds Read in DefaultFontOptions() in NI Circuit Design SuiteEPSS 0.2%