High severity · published Mar 13, 2026
CVE-2026-0957
Out-Of-Bounds Write in Digilent DASYLab
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted file in Digilent DASYLab. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted file. This vulnerability affects all versions of Digilent DASYLab.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 14% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DA
DASYLab · Digilent
0 · source: vendor, NVD
In the news
VulnerabilityHigh
ZDI-26-235: Digilent DASYLab DSA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent DASYLab. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-0957.
Mar 30, 2026·Zero Day Initiative
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-0957
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-0957
Vendor Advisory
https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/2026/out-of-bounds-write-vulnerabilities-in-digilent-dasylab.html
More from DASYLab
7.8
CVE-2026-0956
Out-Of-Bounds Read in Digilent DASYLab
7.8
CVE-2026-0955
Out-Of-Bounds Read When Opening a Corrupt File in Digilent DASYLab
7.8
CVE-2026-0954
Out-Of-Bounds Write When Opening a Corrupt DSB File in Digilent DASYLab