CVE-2025-57778CWE-1285CWE-787

CVE-2025-57778

High · published September 2, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
18.6
In the wild
Unconfirmed
What it is

There is an out of bounds write vulnerability due to improper bounds checking resulting in an invalid source address when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted DSB file. The vulnerability affects all versions of DASYLab.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00273 · 18.6th percentile
Weaknesses
CWE-1285 · Improper Validation of Specified Index, Position, or Offset in Input; CWE-787 · Out-of-bounds Write
Published
2025-09-02T23:15Z
Affected products (1)
ProductVersionsFixed in
ni/dasylaball versions—
References (1)
https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/memory-corruption-vulnerabilities-in-digilent-dasylab.html · [email protected]
EPSS history
Timeline
  • 02 SEP 18:16Z
    Out Of Bounds Write to invalid source address when parsing a DSB file with Digilent DASYLab
    cvelistv5