CVE-2024-10495

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Dec 10, 2024
CWE ID 1285

Summary

CVE-2024-10495 is a vulnerability affecting NI LabVIEW, where an out-of-bounds read issue in fontmgr.cpp arises due to insufficient input validation during font table loading. An attacker can exploit this flaw by providing a specially crafted VI, potentially leading to information disclosure or code execution. This vulnerability poses a risk for LabVIEW 2024 Q3 and earlier versions.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share