ZDI-26-236
HIGH 7.8
Published
Mar 30, 2026
Digilent DASYLab DSB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Digilent
Digilent DASYLab contains a remote code execution vulnerability (CVE-2026-0954) that allows attackers to execute arbitrary code on affected systems if a user is tricked into opening a malicious file or visiting a malicious webpage. This is a high-severity vulnerability with a CVSS score of 7.8 that gives attackers complete control over compromised machines. Security teams should prioritize patching DASYLab installations and educate users to avoid opening untrusted files or clicking suspicious links until updates are available.