CVE-2024-10495 HIGH

CVE-2024-10495: Out of bounds read when loading the font table in fontmgr.cpp in NI LabVIEW

Vendor Ni
Product LabVIEW
Weakness CWE-1285
Published December 10, 2024
Last update December 10, 2024
View on NVD All CVEs

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

An out of bounds read due to improper input validation when loading the font table in fontmgr.cpp in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q3 and prior versions.

Key dates

02Disclosure timeline

December 10, 2024 CVE published
December 10, 2024 Record updated