| Package | Affected versions | Patched versions |
|---|---|---|
| instrumentstudio | = 2026≤ 2025 | |
| ni grpc device server | < 2.18.0 | 2.18.0 |
There is an untrusted pointer dereference vulnerability in the NI grpc-device sideband streaming API that may allow an attacker to cause an arbitrary memory dereference, potentially resulting in remote code execution. Successful exploitation requires an attacker to supply a specially crafted Moniker protobuf message. This affects NI grpc-device 2.17.0 and prior versions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free