CVE-2025-64467 HIGH

CVE-2025-64467: Out-of-Bounds Read in LVResFile::FindRsrcListEntry() in NI LabVIEW

Vendor Ni
Product LabVIEW
Weakness CWE-125
Published December 18, 2025
Last update February 26, 2026
View on NVD All CVEs

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

There is an out of bounds read vulnerability in NI LabVIEW in LVResFile::FindRsrcListEntry() when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q3 (25.3) and prior versions.

Key dates

02Disclosure timeline

December 18, 2025 CVE published
February 26, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-9323 Foxit PDF Reader JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability CVE-2022-28255 Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability CVE-2026-40333 libgphoto2 has OOB read in ptp_unpack_EOS_ImageFormat() and ptp_unpack_EOS_CustomFuncEx() due to missing length parameter in ptp-pack.c CVE-2021-21075 Adobe Animate out-of-bounds read vulnerability CVE-2023-51550 Foxit PDF Reader combobox Out-Of-Bounds Read Information Disclosure Vulnerability