CVE-2026-18444
Medium · 6.6CVSS
6.6
EPSS
0.1%
Published
Aug 25, 2026
CISA due date
—
The record
There is an integer conversion vulnerability resulting in an out-of-bounds read when loading images recently discovered in NI LabVIEW. This may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI file. This vulnerability affects NI LabVIEW 2026 Q3 and prior versions.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-77406 RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. CWE-195
- CVE-2026-62959 Coturn is a free open source implementation of TURN and STUN Server. CWE-195
- CVE-2026-55991 In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a remote unauthenticated client… CWE-195
- CVE-2026-49840 FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from… CWE-195
- CVE-2026-41682 pupnp is an SDK for development of UPnP device and control point applications. CWE-195
- CVE-2026-26981 OpenEXR provides the specification and reference implementation of the EXR file format… CWE-195
- CVE-2025-67897 In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short. CWE-195