PT-2025-35597 · Digilent · Digilent Dasylab

Kimiya · Published 2025-09-02 · Updated 2025-11-21 · CVE-2025-57776

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Digilent DASYLab (affected versions not specified)

Description The software contains an out-of-bounds write issue caused by insufficient bounds checking when processing DSB files. This can lead to an invalid address being accessed and potentially allow for arbitrary code execution. An attacker can exploit this by tricking a user into opening a specially crafted DSB file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Memory Corruption

Weakness Enumeration

CWE-787

CWE-1285

Related Identifiers

CVE-2025-57776

ZDI-25-889

Affected Products

Digilent Dasylab

References · 6

• https://zerodayinitiative.com/advisories/ZDI-25-889 · Security Note
• https://ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/memory-corruption-vulnerabilities-in-digilent-dasylab.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-57776 · Security Note
• https://twitter.com/TheZDIBugs/status/1991998089448542221 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1963006010919977296 · Twitter Post
• https://twitter.com/CVEnew/status/1962950192132469195 · Twitter Post