CVE-2025-57778
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
Digilent DASYLab has an out-of-bounds write vulnerability due to improper bounds checking when parsing a DSB file, which may result in arbitrary code execution. An attacker must trick a user into opening a specially crafted DSB file.
Risk Assessment
Arbitrary code execution could allow an attacker to take control of the user's system, potentially leading to data theft or malware installation.
Recommendation
Update DASYLab to the latest version if available, and avoid opening DSB files from untrusted sources.
Other vulnerabilities in Digilent DASYLab
Original NVD description (English source)
There is an out of bounds write vulnerability due to improper bounds checking resulting in an invalid source address when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted DSB file. The vulnerability affects all versions of DASYLab.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

