CVE-2026-64200
HighCVSS 7.8Summary
There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a read past the end of an allocated heap buffer during string conversion. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file.
Risk Assessment
An attacker could cause memory disclosure or application crash, potentially compromising confidentiality and availability.
Recommendation
Update DASYLab to version 2026.0.0 or later and do not open .DSB files from untrusted sources.
Other vulnerabilities in DASYLab
See all- CVE-2026-64199High
There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a read outside the bounds of an allocated data structure. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file.
- CVE-2026-64198High
There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a read a few bytes past the end of an allocated heap buffer during file handling. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file.
- CVE-2026-64197High
There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structure. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file.
- CVE-2026-64196High
There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated heap. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file.
- CVE-2026-64195High
There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user-supplied data. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file.
Original NVD description (English source)
There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read a past the end of an allocated heap buffer during string conversion. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions before 2026.0.0.