Skip to main content

Dasylab CVE-2025-57778

HIGH
Improper Validation of Specified Index, Position, or Offset in Input (CWE-1285)
2025-09-02 security@ni.com
8.5
CVSS 4.0 · NVD
Share

Severity by source

NVD PRIMARY
8.5 HIGH
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
P
Scope
X

Lifecycle Timeline

2
Analysis Generated
Mar 28, 2026 - 19:10 vuln.today
CVE Published
Sep 02, 2025 - 19:15 nvd
HIGH 8.5

DescriptionCVE.org

There is an out of bounds write vulnerability due to improper bounds checking resulting in an invalid source address when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted DSB file. The vulnerability affects all versions of DASYLab.

AnalysisAI

There is an out of bounds write vulnerability due to improper bounds checking resulting in an invalid source address when parsing a DSB file with Digilent DASYLab. Rated high severity (CVSS 8.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-1285. There is an out of bounds write vulnerability due to improper bounds checking resulting in an invalid source address when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted DSB file. The vulnerability affects all versions of DASYLab. Affected products include: Ni Dasylab.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2025-9188 HIGH
8.5 Sep 02

There is a deserialization of untrusted data vulnerability in Digilent DASYLab. Rated high severity (CVSS 8.5), this vul

CVE-2025-57777 HIGH
8.5 Sep 02

There is an out of bounds write vulnerability due to improper bounds checking in displ2.dll when parsing a DSB file with

CVE-2025-57776 HIGH
8.5 Sep 02

There is an out of bounds write vulnerability due to improper bounds checking resulting in an invalid address when parsi

CVE-2025-57775 HIGH
8.5 Sep 02

There is a heap-based Buffer Overflow vulnerability due to improper bounds checking when parsing a DSB file with Digilen

CVE-2025-57774 HIGH
8.5 Sep 02

There is an out of bounds write vulnerability due to improper bounds checking resulting in invalid data when parsing a D

CVE-2026-0956 HIGH
7.8 Mar 13

Memory corruption vulnerability in all versions of Digilent DASYLab data acquisition software that occurs when processin

CVE-2026-0955 HIGH
7.8 Mar 13

Memory corruption vulnerability in all versions of Digilent DASYLab software that allows attackers to achieve informatio

CVE-2026-0957 HIGH
7.8 Mar 13

Memory corruption vulnerability in all versions of Digilent DASYLab that allows attackers to execute arbitrary code or s

CVE-2026-0954 HIGH
7.8 Mar 13

Memory corruption vulnerability in all versions of Digilent DASYLab data acquisition software that allows attackers to a

CVE-2025-9189 HIGH
8.5 Sep 02

There is an out of bounds write vulnerability due to improper bounds checking resulting in a large destination address w

Share

CVE-2025-57778 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy