CVE-2026-64195

Received Received - Intake

Out-of-Bounds Write in DASYLab Software

Publication date: 2026-09-03

Last updated on: 2026-09-03

Assigner: National Instruments

Description

There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user-supplied data. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions before 2026.0.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-03

Last Modified

2026-09-03

Generated

2026-09-04

AI Q&A

2026-09-04

EPSS Evaluated

N/A

NVD

CVE-2026-64195

Affected Vendors & Products

Vendor	Product	Version / Range
ni	dasy_lab	to 2026.0.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This is an out-of-bounds write vulnerability in DASYLab caused by improper validation of user-supplied data. An attacker can exploit it by tricking a user into opening a specially crafted .DSB file. All versions before 2026.0.0 are affected.

Detection Guidance

Detection involves checking for vulnerable DASYLab versions and scanning for .DSB files. Inspect installed software versions and monitor for suspicious .DSB files. No specific commands are provided in the context.

Impact Analysis

Successful exploitation could allow an attacker to execute arbitrary code or cause a denial of service on the affected system. Since it requires user interaction, opening a malicious file is necessary for the attack to succeed.

Compliance Impact

The vulnerability involves an out-of-bounds write in DASYLab due to improper validation of user-supplied data, which could lead to arbitrary code execution if a user opens a malicious .DSB file. This could potentially compromise data integrity and confidentiality, which are key concerns for GDPR and HIPAA compliance. However, specific compliance impacts depend on how the software is used in a given environment.

Mitigation Strategies

Immediately update DASYLab to version 2026.0.0 or later. Avoid opening .DSB files from untrusted sources. Disable automatic opening of .DSB files if possible.

Hi! I’m here to help you understand CVE-2026-64195. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70