A memory corruption vulnerability in NI LabVIEW poses a significant risk of arbitrary code execution if a user is tricked into opening a specially crafted VI file.

The vulnerability is an out-of-bounds read (CWE-125) occurring in the mgcore_SH_25_3!aligned_free() function, which can be triggered by an attacker supplying a malicious VI file to a user. Per the CVSS vector, this vulnerability requires user interaction but does not require prior authentication.

The potential for arbitrary code execution creates a high risk of system compromise, data theft, and unauthorized control over the host environment. With a CVSS score of 7.8, this vulnerability is classified as High, reflecting the severe technical impact despite the requirement for user interaction. Organizations relying on LabVIEW for critical industrial or engineering processes face significant operational risks if workstations are compromised.

Immediate Action: Update all instances of NI LabVIEW to the latest patched versions provided in the vendor security advisory.

Proactive Monitoring: Monitor file system activity for suspicious VI file access and review endpoint logs for crashes associated with the LabVIEW runtime environment.

Compensating Controls: Implement strict email filtering and endpoint protection policies to prevent users from opening untrusted or unsolicited VI files from external sources.

Public Exploit Available: Unknown

Given the potential for total system impact and arbitrary code execution, security teams should prioritize patching this vulnerability across all development and deployment environments. Ensure that all users are cautioned against opening unexpected project files, and apply the vendor-supplied updates immediately to eliminate the underlying memory corruption flaw.