Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2024-12740

Dependency on Vulnerable Third-Party Component exposes Vulnerabilities in NI Vision Software

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NI

Description

Vision related software from NI used a third-party library for image processing that exposes several vulnerabilities. These vulnerabilities may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted file.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NI Vision Development Module

Default version status: unaffected

  • 0 to ≤ 24.1affected

NI FlexRIO

Default version status: unaffected

  • 0 to < 25.0affected

NI NI-IMAQdx

Default version status: unaffected

  • 0 to ≤ 23.1affected

NI Vision Acquisition Software

Default version status: unaffected

  • 0 to ≤ 23.1affected

NI Vision Builder for Automated Inspection

Default version status: unaffected

  • 0 to ≤ 23.*affected

NI Data Record AD

Default version status: unaffected

  • 0 to ≤ 2.0affected

NI FRC Game Tools

Default version status: unaffected

  • 0 to ≤ 25.0affected

References