CVE-2026-64197

Received Received - Intake

Out-of-Bounds Write in DASYLab via Malicious .DSB File

Publication date: 2026-09-03

Last updated on: 2026-09-03

Assigner: National Instruments

Description

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structure. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions before 2026.0.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-03

Last Modified

2026-09-03

Generated

2026-09-04

AI Q&A

2026-09-04

EPSS Evaluated

N/A

NVD

CVE-2026-64197

Affected Vendors & Products

Vendor	Product	Version / Range
ni	dasy_lab	to 2026.0.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This is an out-of-bounds write vulnerability in DASYLab caused by improper validation of user-supplied data. It allows writing past the end of an allocated data structure. Exploitation requires a user to open a specially crafted .DSB file.

Detection Guidance

Detection requires monitoring for suspicious .DSB file handling. Check for unexpected crashes when opening files in DASYLab. Review system logs for application errors related to memory access violations. No specific commands are provided in the context.

Impact Analysis

Successful exploitation could allow an attacker to execute arbitrary code or cause a denial of service on the affected system. Since it requires user interaction, it poses a risk if users open untrusted .DSB files.

Compliance Impact

The vulnerability involves an out-of-bounds write in DASYLab due to improper data validation, which could allow arbitrary code execution if exploited. This may lead to unauthorized access or data manipulation, potentially violating GDPR (data integrity) or HIPAA (protected health information integrity).

Mitigation Strategies

Update DASYLab to version 2026.0.0 or later. Avoid opening .DSB files from untrusted sources. Implement file validation checks before processing. Monitor vendor advisories for patches.

Hi! I’m here to help you understand CVE-2026-64197. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70