VULNERABILITY INTELLIGENCE
CVE-2026-64200
CVSS score7.8 HIGH
EPSS probability0.16%
CISA KEVNot currently listed
Published2026-09-03
Last modified2026-09-22
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read a past the end of an allocated heap buffer during string conversion. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions before 2026.0.0.
Weakness classification
- security@ni.com: CWE-125
Primary references
- security@ni.com — Vendor Advisory