What is CVE-2024-10495?

CVE-2024-10495 is a high-severity vulnerability in Ni Labview, classified under CWE-1285. CVSS score: 7.8/10. Published 2024-12-10.

How severe is CVE-2024-10495?

High severity. CVSS v3 base score is 7.8 out of 10.

Out-of-bounds Read in Ni Labview

CVE-2024-10495

An out of bounds read due to improper input validation when loading the font table in fontmgr.cpp in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q3 and prior versions.

EPSS: 0.002 (9.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Ni Labview — versions 2023, 2022, 2024

Weakness classification (CWE)

CWE-1285
CWE-125 — Out-of-bounds Read

References

security@ni.com (Vendor Advisory)

Frequently asked questions

What is CVE-2024-10495?: CVE-2024-10495 is a high-severity vulnerability in Ni Labview, classified under CWE-1285. CVSS score: 7.8/10. Published 2024-12-10.
How severe is CVE-2024-10495?: High severity. CVSS v3 base score is 7.8 out of 10.