This vulnerability (CVE-2026-0956) involves an out-of-bounds read (CWE-125) in Digilent DASYLab triggered by loading a corrupted file. The flaw can cause memory corruption, which may allow an attacker to disclose sensitive information or execute arbitrary code. Exploitation requires that a user open a maliciously crafted file. The CVSS 3.1 base score is 7.8, reflecting high impact with local attack vector, low attack complexity, no privileges required, and user interaction needed.

Successful exploitation can lead to high-impact consequences including information disclosure, arbitrary code execution, and denial of service. The attacker must convince a user to open a malicious file, which could result in compromise of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, users should avoid opening files from untrusted sources and apply standard caution when handling files in DASYLab.