CVE-2026-64200: Out Of Bounds Read in during string conversionwhen parsing a .DSB file in DASYLab
There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read a past the end of an allocated heap buffer during string conversion. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions before 2026.0.0.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Users running DASYLab versions before 2026.0.0 are affected if they open a specially crafted .DSB file. Exploitation requires user interaction; an attacker must convince a user to open the file.
What is the impact if exploitation succeeds?
The vulnerability is rated high with a CVSS score of 7.8 and has high confidentiality, integrity, and availability impacts. It is caused by an out-of-bounds heap read during string conversion while parsing the file.
How can I determine whether my installation is affected?
Check the installed DASYLab version. Versions earlier than 2026.0.0 are affected, while the issue is stated to affect all versions before that release.