Vulnerability details

CVE-2025-57778

Digilent DASYLab

Out Of Bounds Write to invalid source address when parsing a DSB file with Digilent DASYLab

CVSS 4.0

8.5High

Official description

There is an out of bounds write vulnerability due to improper bounds checking resulting in an invalid source address when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted DSB file. The vulnerability affects all versions of DASYLab.

CVSS scores

Score	Version	Source	Vector
8.5High	4.0	CVEProject cvelistV5 (CNA) (NI)	`CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N`
7.8High	3.1	CVEProject cvelistV5 (CNA) (NI)	`CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`

Affected products

Vendor	Product	Versions	Source
Digilent	DASYLab	All	CVEProject cvelistV5 (CNA)

References and advisories

https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/memory-corruption-vulnerabilities-in-digilent-dasylab.html

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2025-09-02
Last updated: 2025-09-02
State: Published
Assigner (CNA): NI

Exploit prediction (EPSS)

0.27%

Probability of exploitation in 30 days

19.7%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: No
Exploitation: None
Technical impact: Total

Weaknesses (CWE)

CWE-1285
Improper Validation of Specified Index, Position, or Offset in Input