No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.
Credit: Michael Heinzl
From CISA's machine-readable CSAF 2.0 advisory (JSON).
| CVE | Weakness | CVSS v3 | Details |
|---|---|---|---|
| CVE-2025-30417 | CWE-787 Out-of-bounds Write | 7.8 High |
An out-of-bounds write vulnerability in DecodeBase64() within Circuit Design Suite, caused by improper input validation, may result in arbitrary code execution. To exploit this flaw, an attacker must trick a user into opening a specially crafted SYM file. Mitigation: National Instruments recommends users update to version 14.3.1 or later. ↗ Mitigation: Please see National Instruments security update for more information. ↗ Affected, fixed & timelineAffected:
|
| CVE-2025-30418 | CWE-787 Out-of-bounds Write | 7.8 High |
An out-of-bounds write vulnerability in CheckPins() within Circuit Design Suite, caused by improper input validation, may result in arbitrary code execution. To exploit this flaw, an attacker must trick a user into opening a specially crafted SYM file. Mitigation: National Instruments recommends users update to version 14.3.1 or later. ↗ Mitigation: Please see National Instruments security update for more information. ↗ Affected, fixed & timelineAffected:
|
| CVE-2025-30419 | CWE-125 Out-of-bounds Read | 7.8 High |
An out-of-bounds read vulnerability in GetSymbolBorderRectSize() within Circuit Design Suite, caused by improper input validation, may result in information disclosure or arbitrary code execution. To exploit this flaw, an attacker must trick a user into opening a specially crafted SYM file. Mitigation: National Instruments recommends users update to version 14.3.1 or later. ↗ Mitigation: Please see National Instruments security update for more information. ↗ Affected, fixed & timelineAffected:
|
| CVE-2025-30420 | CWE-125 Out-of-bounds Read | 7.8 High |
An out-of-bounds read vulnerability in InternalDraw() within Circuit Design Suite, caused by improper input validation, may result in information disclosure or arbitrary code execution. To exploit this flaw, an attacker must trick a user into opening a specially crafted SYM file. Mitigation: National Instruments recommends users update to version 14.3.1 or later. ↗ Mitigation: Please see National Instruments security update for more information. ↗ Affected, fixed & timelineAffected:
|
| CVE-2025-30421 | CWE-121 Stack-based Buffer Overflow | 7.8 High |
A stack-based buffer overflow vulnerability within Circuit Design Suite, caused by improper input validation, may result in arbitrary code execution. To exploit this flaw, an attacker must trick a user into opening a specially crafted SYM file. Mitigation: National Instruments recommends users update to version 14.3.1 or later. ↗ Mitigation: Please see National Instruments security update for more information. ↗ Affected, fixed & timelineAffected:
|
Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.
No coverage found in monitored research blogs or news feeds.
| CVE | CVSS | Affected |
|---|---|---|
| CVE-2025-30418 | 8.5 High | NI Circuit Design Suite There is a memory corruption vulnerability due to an out of bounds write in CheckPins() when using the SymbolEditor in NI Circuit Design Suite. This… |
| CVE-2025-30421 | 8.5 High | NI Circuit Design Suite There is a memory corruption vulnerability due to a stack-based buffer overflow in DrObjectStorage::XML_Serialize() when using the SymbolEditor in NI… |
| CVE-2025-30417 | 7.8 High | NI Circuit Design Suite There is a memory corruption vulnerability due to an out of bounds write in Library!DecodeBase64() when using the SymbolEditor in NI Circuit Design S… |
| CVE-2025-30419 | 7.8 High | NI Circuit Design Suite There is a memory corruption vulnerability due to an out of bounds read in GetSymbolBorderRectSize() when using the SymbolEditor in NI Circuit Design… |
| CVE-2025-30420 | 7.8 High | NI Circuit Design Suite There is a memory corruption vulnerability due to an out of bounds read in Bitmap::InternalDraw() when using the SymbolEditor in NI Circuit Design Su… |
Named by the advisory itself. Each CVE links to its tracked detail page.
No KEV-catalogued vendors are named in this publication.