CVE-2026-64196

Analyzed Analyzed - Analysis Complete

Out-of-Bounds Write in DASYLab via Malicious .DSB File

Publication date: 2026-09-03

Last updated on: 2026-09-22

Assigner: National Instruments

Description

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated heap. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions before 2026.0.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-03

Last Modified

2026-09-22

Generated

2026-09-24

AI Q&A

2026-09-04

EPSS Evaluated

2026-09-23

NVD

CVE-2026-64196

EUVD

EUVD-2026-70769

Affected Vendors & Products

Vendor	Product	Version / Range
ni	dasylab	to 2026.0 (exc)
ni	dasylab	2026.0
ni	dasylab	2026.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This is an out-of-bounds write vulnerability in DASYLab caused by improper validation of user-supplied data. It allows writing past the end of an allocated heap. Exploitation requires a user to open a specially crafted .DSB file.

Detection Guidance

Detection requires monitoring for suspicious .DSB file handling or unusual memory writes. Check for crashes when opening .DSB files in DASYLab versions before 2026.0.0. No specific commands are provided in the CVE details.

Impact Analysis

Successful exploitation could allow an attacker to execute arbitrary code, crash the application, or gain unauthorized access to system resources. Since it requires user interaction, it poses a risk if users open untrusted .DSB files.

Compliance Impact

The vulnerability involves an out-of-bounds write in DASYLab due to improper data validation, which could lead to arbitrary code execution. This may compromise data integrity and confidentiality, potentially violating GDPR (data protection) and HIPAA (healthcare data security) if exploited.

Mitigation Strategies

Upgrade DASYLab to version 2026.0.0 or later. Avoid opening .DSB files from untrusted sources. Apply vendor patches if available.

Hi! I’m here to help you understand CVE-2026-64196. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70