There are six memory corruption vulnerabilities recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. These vulnerabilities affect NI LabVIEW 2026 Q3 (26.3.0) and prior versions.
These vulnerabilities are identified as:
CVE-2026-16233 – Out-of-Bounds Write in aligned_free() function
CVE-2026-16234 – Out-of-Bounds Read in StringUtils Converter function
CVE-2026-64201 – Out-of-Bounds Read in EnQRunQ function
CVE-2026-64202 – Out-of-Bounds Read in LVGetFileType function
CVE-2026-64203 – Out-of-Bounds Read in QualifiedName prepend function
CVE-2026-64204 – Out-of-Bounds Write when freeing TDRefCountedPtr
NI strongly recommends upgrading the affected software to mitigate these vulnerabilities. Refer to the Affected Products section for information on upgrading these products.
NI Update Service is a Windows utility that checks for and delivers updates for NI software and drivers, including security updates. It can be used to manually check for updates, configured to periodically check and notify users, or to automatically download and install updates at a scheduled time.
Some mitigations in this advisory are delivered through NI Update Service. NI recommends upgrading to NI Update Service 2026 Q3 or later to get the latest updates. NI Update Service can be installed on its own and is backwards compatible with older NI software.
At NI, we view the security of our products as an important part of our commitment to our customers. Go to ni.com/security to stay informed and act upon security alerts and issues.
NI would like to thank Michael Heinzl for reporting this issue and working with us on coordinated disclosure.
| Product Version | Mitigation |
|---|---|
| LabVIEW 2026 | Upgrade to LabVIEW 2026 Q3 Patch 1 or later from NI Package Manager or Software Downloads or install patch via NI Update Service. |
| LabVIEW 2025 | Upgrade to LabVIEW 2025 Q3 Patch 5 or later from NI Package Manager or Software Downloads or install patch via NI Update Service. |
| LabVIEW 2024 | Upgrade to LabVIEW 2024 Q3 Patch 7 or later from NI Package Manager or Software Downloads or install patch via NI Update Service. |
| LabVIEW 2023 | Upgrade to LabVIEW 2023 Q3 Patch 10 or later from NI Package Manager or Software Downloads or install patch via NI Update Service. |
| LabVIEW 2022 and prior | Not in Mainstream Support |