CVE-2026-9143

Katalog CVE

CVSS 5.3 · Medium EPSS 0,30%

Kerentanan Incorrect Conversion between Numeric Types pada ni instrumentstudio, ni grpc device server. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

There is an incorrect conversion between numeric types vulnerability in NI grpc-device due to missing range checks in CodeGen.  This may silently discard high bits if a size value exceeded the target type's range. This affects NI grpc-device 2.17.0 and prior versions.

Rincian

Terbit di NVD

19 Juni 2026

Terakhir diubah

25 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-681: Incorrect Conversion between Numeric Types

EPSS (30 hari)

0,30% peluang dieksploitasi; lebih tinggi dari 21,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/ni/grpc-device/security/advisories/GHSA-rhh6-fvjv-8m84 advisory vendor
• https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/multiple-v... advisory vendor