【中文导读】该 CVE 涉及远程代码执行、信息泄露、内存破坏(高危风险)。具体受影响产品、版本和修复方案以 NVD/厂商公告为准。 【原始描述】There is a memory corruption vulnerability due to an out of bounds write in XML_Serialize() when using SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .sym file. This vulnerability affects NI Circuit Design Suite 14.3.1 and prior versions.