CVE-2025-9188 — Deserialization of Untrusted Data when parsing a DSB file with Digilent DASYLab

CVE-2025-9188

Deserialization of Untrusted Data when parsing a DSB file with Digilent DASYLab PUBLISHED

Description (CNA)

There is a deserialization of untrusted data vulnerability in Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted DSB file. The vulnerability affects all versions of DASYLab.

Affected (CNA)

Vendor / product	Versions
Digilent / DASYLab	affected 0 through *

CWE

CWE-502

References

https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/memory-corruption-vulnerabilities-in-digilent-dasylab.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.