Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-9143 1 Ni 3 Grpc-device, Instrumentstudio, Ni Grpc Device Server 2026-06-22 3.7 Low
There is an incorrect conversion between numeric types vulnerability in NI grpc-device due to missing range checks in CodeGen.  This may silently discard high bits if a size value exceeded the target type's range. This affects NI grpc-device 2.17.0 and prior versions.
CVE-2026-48141 1 Ni 3 Grpc-device, Instrumentstudio, Ni Grpc Device Server 2026-06-22 5.3 Medium
There is a memory leak in NI grpc-device BeginSidebandStream that may result in denial of service due to memory exhaustion.  This affects NI grpc-device 2.17.0 and prior versions.
CVE-2026-48137 1 Ni 3 Grpc-device, Instrumentstudio, Ni Grpc Device Server 2026-06-22 9.1 Critical
There is an untrusted pointer dereference vulnerability in the NI grpc-device sideband streaming API that may allow an attacker to cause an arbitrary memory dereference, potentially resulting in remote code execution.  Successful exploitation requires an attacker  to supply a specially crafted Moniker protobuf message.  This affects NI grpc-device 2.17.0 and prior versions.