ZDI-CAN-26581: ZDI-25-885: (0Day) Digilent DASYLab DSB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent DASYLab. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-9188.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-26581?
ZDI-CAN-26581 is rated with a CVSS score indicating a high severity level due to its potential for remote code execution.
How do I fix ZDI-CAN-26581?
To mitigate ZDI-CAN-26581, users should apply the latest software updates provided by Digilent for DASYLab.
What type of attacks can exploit ZDI-CAN-26581?
ZDI-CAN-26581 can be exploited through remote attacks requiring user interaction, such as visiting a malicious website or opening a harmful file.
Who is affected by ZDI-CAN-26581?
Users of Digilent DASYLab software are affected by the vulnerability ZDI-CAN-26581.
Is user interaction required to exploit ZDI-CAN-26581?
Yes, user interaction is necessary to exploit ZDI-CAN-26581 as the target must actively engage with a malicious page or file.