Unrated severityNVD Advisory· Published Jun 19, 2026

Out-of-bounds read vulnerability in the NI grpc-device streaming API

CVE-2026-48138

Description

There is an out-of-bounds read vulnerability in the NI grpc-device streaming API due to a missing bounds check that may result in a denial of service. Successful exploitation requires an attacker to supply a specially crafted write request. This affects NI grpc-device 2.17.0 and prior versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ni/grpc-devicellm-fuzzy
Range: <=2.17.0

Patches

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/ni/grpc-device/security/advisories/GHSA-8rjh-429j-f6gwmitrevendor-advisory
www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/multiple-vulnerabilities-in-ni-grpc-device-server.htmlmitrevendor-advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000