This vulnerability (CVE-2026-0955) in Digilent DASYLab involves an out-of-bounds read (CWE-125) triggered by loading a corrupted file. This memory corruption flaw can lead to information disclosure or arbitrary code execution if exploited. The attack vector requires local user interaction (opening a malicious file). The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. No patch or vendor advisory is available to confirm remediation status.

Successful exploitation can result in full compromise of confidentiality, integrity, and availability of the affected system due to arbitrary code execution or information disclosure. The vulnerability requires user interaction and local access to open a crafted file, limiting remote exploitation. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid opening files from untrusted or unknown sources in Digilent DASYLab. Monitor vendor communications for updates on patches or mitigations.