PT-2025-35598 · Dasylab · Dasylab

Kimiya · Published 2025-09-02 · Updated 2025-11-21 · CVE-2025-57778

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DASYLab (affected versions not specified)

Description DASYLab is susceptible to an out-of-bounds write due to insufficient bounds checking when parsing DSB files. This can lead to an invalid source address and potentially result in arbitrary code execution. An attacker can exploit this issue by tricking a user into opening a specially crafted DSB file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Memory Corruption

Weakness Enumeration

CWE-787

CWE-1285

Related Identifiers

CVE-2025-57778

ZDI-25-891

Affected Products

Dasylab

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-57778 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-25-891 · Security Note
• https://ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/memory-corruption-vulnerabilities-in-digilent-dasylab.html · Vendor Advisory
• https://twitter.com/CVEnew/status/1962950191138398545 · Twitter Post
• https://twitter.com/TheZDIBugs/status/1991998091780563163 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1963003450737803387 · Twitter Post