CVE-2026-64199: Out Of Bounds Read outside the bounds of an allocated data structure when parsing a .DSB file in DASYLab
There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read outside the bounds of an allocated data structure. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions before 2026.0.0.
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
DASYLab versions before 2026.0.0 are affected. The issue is triggered during parsing of .DSB files.
What must an attacker do to exploit this issue?
An attacker must create a specially crafted .DSB file and persuade a user to open it in DASYLab. The CVSS vector indicates local attack access and required user interaction, with no privileges required.
How can I determine whether I am exposed?
Check the installed DASYLab version. Systems running a version earlier than 2026.0.0 that open .DSB files, particularly files obtained from untrusted sources, are exposed.