Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-30420

Опубликовано: 15 мая 2025
Источник: nvd
CVSS3: 7.8
EPSS Низкий

Описание

There is a memory corruption vulnerability due to an out of bounds read in Bitmap::InternalDraw() when using the SymbolEditor in NI Circuit Design Suite.  This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .sym file. This vulnerability affects NI Circuit Design Suite 14.3.0 and prior versions.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:ni:circuit_design_suite:*:*:*:*:*:*:*:*
Версия до 14.3.1 (исключая)

EPSS

Процентиль: 5%
0.00023
Низкий

7.8 High

CVSS3

Дефекты

CWE-125
CWE-125

Связанные уязвимости

CVSS3: 7.8
github
9 месяцев назад

There is a memory corruption vulnerability due to an out of bounds read in Bitmap::InternalDraw() when using the SymbolEditor in NI Circuit Design Suite.  This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .sym file. This vulnerability affects NI Circuit Design Suite 14.3.0 and prior versions.

EPSS

Процентиль: 5%
0.00023
Низкий

7.8 High

CVSS3

Дефекты

CWE-125
CWE-125