CVE-2026-9143

MEDIUM6.3

Incorrect Conversion between Numeric Types in NI grpc-device due to missing range checks in CodeGen

Published Jun 19, 2026

Modified 2 days ago

Details

There is an incorrect conversion between numeric types vulnerability in NI grpc-device due to missing range checks in CodeGen. This may silently discard high bits if a size value exceeded the target type's range. This affects NI grpc-device 2.17.0 and prior versions.

References

ADVISORY

https://github.com/ni/grpc-device/security/advisories/GHSA-rhh6-fvjv-8m84

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-9143

ADVISORY

https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/multiple-vulnerabilities-in-ni-grpc-device-server.html

CVSS Analysis

CVSS v4.0

6.3

Exploitability

Attack Vector