CVE-2026-64198 — Out Of Bounds Read in file handling when parsing a .DSB file in DASYLab

CVE-2026-64198

Out Of Bounds Read in file handling when parsing a .DSB file in DASYLab PUBLISHED

Description (CNA)

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read a few bytes past the end of an allocated heap buffer during file handling. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions before 2026.0.0.

Affected (CNA)

Vendor / product	Versions
measX / DASYLab	affected 0 before 2026.0.0

CWE

CWE-125

References

https://www.measx.com/en/service/productsecurity/security-updates-for-measx-software/159-securityupdates/1070-out-of-bounds-read-vulnerabilities-in-dasylab-2.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.