---
id: CVE-2024-10494
title: Out of bounds read in HeapObjMapImpl.cpp in NI LabVIEW
summary: >-
  An out of bounds read due to improper input validation in HeapObjMapImpl.cpp
  in NI LabVIEW may disclose information or result in arbitrary code execution. 
  Successful exploitation requires an attacker to provide a user with a
  specially c…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-1285
vendor: NI
product: LabVIEW
affected:
  - LabVIEW <= 22.3.3
  - LabVIEW >= 23.0.0 <= 23.3.4
  - LabVIEW >= 24.0.0 <= 24.3.1
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2024-12-10T20:33:02.416517Z'
published: '2024-12-10'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:24:38.048Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2024-10494'
references:
  - url: >-
      https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/out-of-bounds-read-vulnerabilities-in-ni-labview-.html
tags:
  - cve.org
epss: 0.00193
epssPercentile: 0.09012
ingestedAt: '2026-11-05T22:38:32.097Z'
---

## Overview

An out of bounds read due to improper input validation in HeapObjMapImpl.cpp in NI LabVIEW may disclose information or result in arbitrary code execution.  Successful exploitation requires an attacker to provide a user with a specially crafted VI.  This vulnerability affects LabVIEW 2024 Q3 and prior versions.

## Affected

- `LabVIEW <= 22.3.3`
- `LabVIEW >= 23.0.0 <= 23.3.4`
- `LabVIEW >= 24.0.0 <= 24.3.1`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.