CNNVD-202509-4456 Information

CNNVD ID

CNNVD-202509-4456

CVE-2025-6034

  • CNNVD Published: 2025-09-30

Description (Chinese)

NI Circuit Design Suite是美国国家仪器(NI)公司的一款电路设计套件,提供了用于电路设计、仿真、验证和布局的一整套工具。 NI Circuit Design Suite 14.3.1及之前版本存在安全漏洞,该漏洞源于SymbolEditor中DefaultFontOptions函数存在越界读取,可能导致信息泄露或任意代码执行。

Description (English)

NI Cituit Design Suite, a circuit design package of the United States National Instrument (NI), provides a set of tools for circuit design, simulation, validation and layout. NI Circuit Design System 14.3.1 and previous versions have a security loophole, which stems from the cross-border reading of the DefaultFontOptions function in SymbolEditor, which may lead to information leaking or arbitrary code execution.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

国家仪器

Published

2025-09-30

Last Modified

2026-02-24

References

https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/improper-input-validation-causes-memory-corruption-vulnerabilities-in-circuit-design-suite.html

Share on: