CVE-2026-64195: Out Of Bounds Write parsing a .DSB file in DASYLab due to lack of proper validation of user-supplied data
There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user-supplied data. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions before 2026.0.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
DASYLabto a version that resolves this vulnerability.Fixed in 2026.0.0
Event History
Frequently Asked Questions
Who is exposed to this issue?
Users of DASYLab versions before 2026.0.0 are affected, particularly where they may open .DSB files received from untrusted or unknown sources.
What must an attacker do to exploit the vulnerability?
The attacker must provide a specially crafted .DSB file and persuade a user to open it in DASYLab. The vulnerability is locally exploitable and requires user interaction, but no privileges are required.
Which version resolves the issue?
The issue affects all DASYLab versions before 2026.0.0. Updating to version 2026.0.0 or later removes exposure to the affected versions.