[Control Systems] National Instruments security advisory (AV26-856)
Canada's Cyber Centre relayed National Instruments advisories for memory corruption, out-of-bounds read, and out-of-bounds write flaws in LabVIEW versions.
The Canadian Centre for Cyber Security published control systems advisory AV26-856 covering National Instruments LabVIEW. Affected versions include releases before 23.0.0, 23.3.10, 24.3.7, 25.3.5, and 26.3.1. The flaws include memory corruption, an integer conversion out-of-bounds read, and an integer overflow out-of-bounds write. Users and administrators are urged to review the links and apply NI security updates.
- Advisory AV26-856 covers LabVIEW versions before 23.0.0, 23.3.10, 24.3.7, 25.3.5, and 26.3.1
- Flaws include memory corruption, an OOB read, and an integer overflow OOB write
- Cyber Centre urges administrators to apply NI security updates
Serial Number: AV26-856 Date: August 28, 2026 As of August 25, 2026, National Instruments is affected by vulnerabilities in the following product: LabVIEW Prior to 23.0.0 Prior to 23.3.10 Prior to 24.3.7 Prior to 25.3.5 Prior to 26.3.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Memory Corruption Vulnerabilities in NI LabVIEW - NI Integer Conversion Vulnerability Resulting in an Out of Bounds Read in NI LabVIEW - NI Integer Overflow Vulnerability Resulting in an Out of Bounds Write in NI LabVIEW - NI Available Security Updates for NI Software: 2026 - NI
This source does not provide full text. Read it at cyber.gc.ca.