CVE-2025-10203CWE-23

Relative Path Traversal Vulnerability in Digilent WaveForms

High · published September 15, 2025

CVSS v4.0
8.5
EPSS
0%
Percentile
9.4
In the wild
Unconfirmed
What it is

Relative path traversal vulnerability due to improper input validation in Digilent WaveForms that may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .DWF3WORK file. This vulnerability affects Digilent WaveForms 3.24.3 and prior versions.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00201 · 9.4th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2025-09-15T16:27Z
EPSS history
Timeline
  • 15 SEP 16:27Z
    Relative Path Traversal Vulnerability in Digilent WaveForms
    cvelistv5