CVE-2025-30421

There is a memory corruption vulnerability due to a stack-based buffer overflow in DrObjectStorage::XML_Serialize() when using the SymbolEditor in NI Circuit Design Suite.  This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .sym file. This vulnerability affects NI Circuit Design Suite 14.3.0 and prior versions.

• CWE-121
• CWE-787

• https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/memory-corruption-vulnerabilities-in-ni-circuit-design-suite.htmlVendor Advisory

Published

May 15, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-30416Sensitive data disclosure and manipulation due to missing au…10
• CVE-2025-30417There is a memory corruption vulnerability due to an out of …7.8
• CVE-2025-30418There is a memory corruption vulnerability due to an out of …7.8
• CVE-2025-30419There is a memory corruption vulnerability due to an out of …7.8
• CVE-2025-3042A vulnerability classified as critical was found in Project …9.8
• CVE-2025-30420There is a memory corruption vulnerability due to an out of …7.8
• CVE-2025-30422A buffer overflow was addressed with improved input validati…6.5
• CVE-2025-30424A logging issue was addressed with improved data redaction. …9.8
• CVE-2025-30425This issue was addressed through improved state management. …4.3
• CVE-2025-30426This issue was addressed with additional entitlement checks.…9.8
• CVE-2025-30427A use-after-free issue was addressed with improved memory ma…4.3
• CVE-2025-30428This issue was addressed through improved state management. …5.4