CVE-2025-10203: Relative Path Traversal Vulnerability in Digilent WaveForms

Q: What is the severity of CVE-2025-10203?

The severity of CVE-2025-10203 is critical due to its potential for arbitrary code execution.

Q: How do I fix CVE-2025-10203?

To fix CVE-2025-10203, update Digilent WaveForms to version 3.24.4 or later.

Q: What causes CVE-2025-10203?

CVE-2025-10203 is caused by improper input validation in the handling of .DWF3WORK files.

Q: Who is affected by CVE-2025-10203?

Users of Digilent WaveForms versions up to 3.24.3 are affected by CVE-2025-10203.

Q: What types of attacks can exploit CVE-2025-10203?

CVE-2025-10203 can be exploited through specially crafted .DWF3WORK files that prompt user interaction.

Published Sep 15, 2025

Updated

Relative path traversal vulnerability due to improper input validation in Digilent WaveForms that may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .DWF3WORK file. This vulnerability affects Digilent WaveForms 3.24.3 and prior versions.

Affected Software

1 affected component

Digilent WaveForms<3.24.3

Event History

Sep 15, 2025

CVE Published

via MITRE·04:27 PM

Data Sourced

via MITRE·04:27 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2025-10203?

The severity of CVE-2025-10203 is critical due to its potential for arbitrary code execution.

How do I fix CVE-2025-10203?

To fix CVE-2025-10203, update Digilent WaveForms to version 3.24.4 or later.

What causes CVE-2025-10203?

CVE-2025-10203 is caused by improper input validation in the handling of .DWF3WORK files.

Who is affected by CVE-2025-10203?

Users of Digilent WaveForms versions up to 3.24.3 are affected by CVE-2025-10203.

What types of attacks can exploit CVE-2025-10203?