CVE-2025-57776

There is an out of bounds write vulnerability due to improper bounds checking resulting in an invalid address when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted DSB file. The vulnerability affects all versions of DASYLab.

Score

CVSS 4.0 8.5 High

Status

Analyzed - security@ni.com

Published

2025-09-02

Last modified

2025-09-02

Weaknesses

CWE-1285, CWE-787

Affected products

• Dasylab (Digilent)
• Dasylab (Ni)

References

• https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/memory-corruption-vulner…