CVE-2026-64197: Out Of Bounds Write when parsing a .DSB file in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structure

Severity: high (CVSS 7.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-03 · updated 2026-09-22
Weakness: CWE-787

Description

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structure. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions before 2026.0.0.

Affected products

Digilent DASYLab: before 2026.0; 2026.0, 2026.0-build_32 — fixed in 2026.0

How to fix

Upgrade to a fixed version: Digilent DASYLab 2026.0. Check the vendor advisory for mitigations.

References

https://www.measx.com/en/service/productsecurity/security-updates-for-measx-software/159-securityupdates/1071-out-of-bounds-write-vulnerabilities-in-dasylab-2.html

Get alerted when CVE-2026-64197 or the next vulnerability affects your stack