CVE-2026-64196
HighCVSS 7.8Summary
There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated heap. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file.
Risk Assessment
May lead to memory corruption, potentially enabling remote code execution or application crash, affecting integrity and availability.
Recommendation
Update DASYLab to version 2026.0.0 or later and be cautious when opening .DSB files.
Other vulnerabilities in DASYLab
See all- CVE-2026-64200High
There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a read past the end of an allocated heap buffer during string conversion. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file.
- CVE-2026-64199High
There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a read outside the bounds of an allocated data structure. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file.
- CVE-2026-64198High
There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a read a few bytes past the end of an allocated heap buffer during file handling. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file.
- CVE-2026-64197High
There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structure. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file.
- CVE-2026-64195High
There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user-supplied data. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file.
Original NVD description (English source)
There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated heap. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions before 2026.0.0.