- Description
- An out of bounds read due to improper input validation in HeapObjMapImpl.cpp in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q3 and prior versions.
- Source
- security@ni.com
- NVD status
- Analyzed
CVSS 4.0
- Type
- Secondary
- Base score
- 8.4
- Impact score
- -
- Exploitability score
- -
- Vector string
- CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Severity
- HIGH
CVSS 3.1
- Type
- Primary
- Base score
- 7.8
- Impact score
- 5.9
- Exploitability score
- 1.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Severity
- HIGH
- Hype score
- Not currently trending
CVE-2024-10494 Out of Bounds Read in LabVIEW May Enable Code Execution In NI LabVIEW, there's an issue in HeapObjMapImpl.cpp because it doesn't check inputs correctly. This can lead to out of bounds read, which m... https://t.co/xir1dfAIu0
@VulmonFeeds
10 Dec 2024
37 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2024-10494 An out of bounds read due to improper input validation in HeapObjMapImpl.cpp in NI LabVIEW may disclose information or result in arbitrary code execution. Successful… https://t.co/j7IjN5Kg9Z
@CVEnew
10 Dec 2024
224 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[CVE-2024-10494: HIGH] LabVIEW vulnerability in HeapObjMapImpl.cpp may lead to information disclosure or code execution with a crafted VI. LabVIEW 2024 Q3 and earlier are affected.#cybersecurity,#vulnerability https://t.co/Wx5KibIwWC https://t.co/tlffMtOjuk
@CveFindCom
10 Dec 2024
33 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ni:labview:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "807AE6D5-8096-47A2-A47D-1A5EFC85652D",
"versionEndIncluding": "2021"
},
{
"criteria": "cpe:2.3:a:ni:labview:2022:q1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4D12D6CF-802F-47BA-ADF9-9E52C071BD7F"
},
{
"criteria": "cpe:2.3:a:ni:labview:2022:q3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "340F61E5-D1ED-4C29-A894-8BC5C5B90ACE"
},
{
"criteria": "cpe:2.3:a:ni:labview:2022:q3_patch1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "52CC3023-4913-40BA-B74C-786F32DC7551"
},
{
"criteria": "cpe:2.3:a:ni:labview:2022:q3_patch2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC150E98-5889-4A65-84B8-E4871091D104"
},
{
"criteria": "cpe:2.3:a:ni:labview:2023:q1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D7DD2022-CFB7-4F38-B459-C1AFB55B5B68"
},
{
"criteria": "cpe:2.3:a:ni:labview:2023:q3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "18AB0B07-72FE-4861-B69D-AD2E87C5382E"
},
{
"criteria": "cpe:2.3:a:ni:labview:2023:q3_patch1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "91928C9C-F094-4EE4-9FBE-2B7956D68E6F"
},
{
"criteria": "cpe:2.3:a:ni:labview:2023:q3_patch2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "044C4B51-C641-41F2-ACA0-834C99D63285"
},
{
"criteria": "cpe:2.3:a:ni:labview:2023:q3_patch3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26EEE5E3-AD37-4832-A66C-5F8F7A478F30"
},
{
"criteria": "cpe:2.3:a:ni:labview:2023:q3_patch4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5DC20B17-C582-42C4-9780-5DC61B4AED91"
},
{
"criteria": "cpe:2.3:a:ni:labview:2024:q1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7753CCDF-BAF8-4F91-B85B-EBB2B88F6F30"
},
{
"criteria": "cpe:2.3:a:ni:labview:2024:q1_patch1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "953E8FD0-4420-4592-B696-C377D4EE0CA2"
},
{
"criteria": "cpe:2.3:a:ni:labview:2024:q3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D99DCCD-511E-482E-8307-24382D1B621B"
},
{
"criteria": "cpe:2.3:a:ni:labview:2024:q3_patch1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "600A4905-B888-454F-9DF6-1C09FB71DBE2"
}
],
"operator": "OR"
}
]
}
]