CVE-2025-2629 — DLL Hijacking Vulnerability in NI LabVIEW When Loading NI Error Reporting

Description (CNA)

There is a DLL hijacking vulnerability due to an uncontrolled search path that exists in NI LabVIEW when loading NI Error Reporting. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to insert a malicious DLL into the uncontrolled search path. This vulnerability affects NI LabVIEW 2025 Q1 and prior versions.

Affected (CNA)

Vendor / product	Versions
NI / LabVIEW	affected 0 before 22.3.4; affected 23.1.0 before 223.3.5; affected 24.1.0 before 24.3.2; affected 25.1.0 before 25.1.1

CWE

CWE-427

References

https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/dll-hijacking-vulnerability-in-ni-labview-when-loading-ni-error-reporting.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.