CVE-2026-64199

Received Received - Intake

Out-of-Bounds Read in DASYLab Software

Publication date: 2026-09-03

Last updated on: 2026-09-03

Assigner: National Instruments

Description

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read outside the bounds of an allocated data structure. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions before 2026.0.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-03

Last Modified

2026-09-03

Generated

2026-09-04

AI Q&A

2026-09-04

EPSS Evaluated

N/A

NVD

CVE-2026-64199

Affected Vendors & Products

Vendor	Product	Version / Range
ni	dasy_lab	to 2026.0.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This is an out-of-bounds read vulnerability in DASYLab caused by improper validation of user-supplied data. It allows reading outside allocated memory when a user opens a specially crafted .DSB file. All versions before 2026.0.0 are affected.

Detection Guidance

Detection involves monitoring for suspicious .DSB files or unusual application behavior. Check for files with .DSB extension from untrusted sources. Enable application logging in DASYLab to track file access patterns. Inspect system logs for crashes or errors related to DASYLab after opening files.

Impact Analysis

An attacker could exploit this to read sensitive memory, potentially leading to information disclosure or system crashes. It requires user interaction to open a malicious file.

Compliance Impact

The vulnerability involves an out-of-bounds read in DASYLab due to improper data validation, which could allow attackers to access sensitive memory. This may lead to unauthorized data exposure or manipulation, potentially violating GDPR (data protection) or HIPAA (health data privacy) if exploited.

Mitigation Strategies

Update DASYLab to version 2026.0.0 or later immediately. Avoid opening .DSB files from untrusted or unknown sources. Implement file integrity monitoring for DASYLab executables and configurations. Restrict user permissions to minimize potential impact if exploitation occurs.

Hi! I’m here to help you understand CVE-2026-64199. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70