CVE-2025-6034

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-6034
There is a memory corruption vulnerability due to an out of bounds read in DefaultFontOptions() when using SymbolEditor in NI Circuit Design Suite.  This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .sym file. This vulnerability affects NI Circuit Design Suite 14.3.1 and prior versions.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/improper-input-validation-causes-memory-corruption-vulnerabilities-in-circuit-design-suite.html Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:ni:circuit_design_suite:*:*:*:*:*:*:*:*
History

17 Jun 2026, 10:01

Type Values Removed Values Added
Summary
  • (es) Existe una vulnerabilidad de corrupción de memoria debido a una lectura fuera de límites en DefaultFontOptions() al usar SymbolEditor en NI Circuit Design Suite. Esta vulnerabilidad puede resultar en revelación de información o ejecución de código arbitrario. La explotación exitosa requiere que un atacante consiga que un usuario abra un archivo .sym especialmente diseñado. Esta vulnerabilidad afecta a NI Circuit Design Suite 14.3.1 y versiones anteriores.

07 Oct 2025, 13:20

Type Values Removed Values Added
First Time Ni
Ni circuit Design Suite
CPE cpe:2.3:a:ni:circuit_design_suite:*:*:*:*:*:*:*:*
References () https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/improper-input-validation-causes-memory-corruption-vulnerabilities-in-circuit-design-suite.html - () https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/improper-input-validation-causes-memory-corruption-vulnerabilities-in-circuit-design-suite.html - Vendor Advisory

30 Sep 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-09-30 16:15

Updated : 2026-06-17 10:01

NVD link : CVE-2025-6034

Mitre link : CVE-2025-6034

CVE.ORG link : CVE-2025-6034

JSON object : View

Products Affected

ni

  • circuit_design_suite
CWE
CWE-125

Out-of-bounds Read