high7.5
CVE-2026-48138
There is an out-of-bounds read vulnerability in the NI grpc-device streaming API due to a missing bounds check that may result in a denial of service.
Impact
There is an out-of-bounds read vulnerability in the NI grpc-device streaming API due to a missing bounds check that may result in a denial of service. Successful exploitation requires an attacker to supply a specially crafted write request. This affects NI grpc-device 2.17.0 and prior versions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ni | Instrumentstudio | through 2025 Version 2026 |
| Ni | Ni Grpc Device Server | before 2.18.0 |