What is CVE-2024-6638?

CVE-2024-6638 is a medium-severity vulnerability in Ni Labview, classified under Integer Overflow or Wraparound. CVSS score: 5.5/10. Published 2024-07-22.

How severe is CVE-2024-6638?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Integer overflow in Ni Labview

CVE-2024-6638

An integer overflow vulnerability due to improper input validation when reading TDMS files in LabVIEW may result in an infinite loop. Successful exploitation requires an attacker to provide a user with a specially crafted TDMS file. This vulnerability affects LabVIEW 2024 Q1 and prior versions.

Vulnerability class: Integer Overflow

EPSS: 0.002 (5.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H.

Affected products

Ni Labview — versions 2023, 2022, 2024

Weakness classification (CWE)

CWE-190 — Integer Overflow or Wraparound

References

security@ni.com (Vendor Advisory)

Frequently asked questions

What is CVE-2024-6638?: CVE-2024-6638 is a medium-severity vulnerability in Ni Labview, classified under Integer Overflow or Wraparound. CVSS score: 5.5/10. Published 2024-07-22.
How severe is CVE-2024-6638?: Medium severity. CVSS v3 base score is 5.5 out of 10.