ZDI-26-235
HIGH 7.8
Published
Mar 30, 2026
Digilent DASYLab DSA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Digilent
A high-severity remote code execution vulnerability (CVE-2026-0957) affects Digilent DASYLab, allowing attackers to execute arbitrary code on vulnerable systems if a user visits a malicious webpage or opens a malicious file. This vulnerability poses significant risk as it requires only basic user interaction to compromise affected systems. Security teams should prioritize patching DASYLab installations and educate users to avoid opening untrusted files or visiting suspicious links related to this application.