Vulnerability Description
An integer overflow vulnerability due to improper input validation when reading TDMS files in LabVIEW may result in an infinite loop. Successful exploitation requires an attacker to provide a user with a specially crafted TDMS file. This vulnerability affects LabVIEW 2024 Q1 and prior versions.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ni | Labview | <= 2021 |
Related Weaknesses (CWE)
References
- https://www.ni.com/en/support/security/available-critical-and-security-updates-fVendor Advisory
- https://www.ni.com/en/support/security/available-critical-and-security-updates-fVendor Advisory
FAQ
What is CVE-2024-6638?
CVE-2024-6638 is a vulnerability with a CVSS score of 5.5 (MEDIUM). An integer overflow vulnerability due to improper input validation when reading TDMS files in LabVIEW may result in an infinite loop. Successful exploitation requires an attacker to provide a user wi...
How severe is CVE-2024-6638?
CVE-2024-6638 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-6638?
Check the references section above for vendor advisories and patch information. Affected products include: Ni Labview.