CVE-2026-0957
Received Received - Intake

Out-of-Bounds Write in Digilent DASYLab Enables Code Execution

Publication date: 2026-03-13

Last updated on: 2026-03-19

Assigner: National Instruments

Description
There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted file in Digilent DASYLab.  This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted file. This vulnerability affects all versions of Digilent DASYLab.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-03-13
Last Modified
2026-03-19
Generated
2026-07-06
AI Q&A
2026-03-13
EPSS Evaluated
2026-07-05
NVD
CVE-2026-0957
EUVD
EUVD-2026-12037

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ni dasylab *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a memory corruption issue caused by an out-of-bounds write when loading a corrupted file in Digilent DASYLab. It occurs because the software does not properly handle specially crafted files, leading to memory being overwritten outside its intended boundaries.

An attacker can exploit this vulnerability by tricking a user into opening a maliciously crafted file, which then triggers the memory corruption.

Impact Analysis

Exploitation of this vulnerability can lead to serious impacts including information disclosure, where sensitive data may be exposed, or arbitrary code execution, allowing an attacker to run malicious code on the affected system.

Because the vulnerability requires user interaction (opening a malicious file), the risk depends on the likelihood of such files being received and opened.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-0957. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart