CVE-2026-64195: CWE-787 Out-of-bounds write in measX DASYLab

This vulnerability (CWE-787) in DASYLab arises from a lack of proper validation of user-supplied data, leading to an out-of-bounds write condition. An attacker can exploit this by convincing a user to open a maliciously crafted .DSB file, potentially causing memory corruption. The CVSS 4.0 base score is 8.5, indicating high severity, with attack vector local, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability. The issue affects all versions prior to 2026.0.0. There is no vendor advisory or patch information available at this time.

Successful exploitation can lead to memory corruption through an out-of-bounds write, potentially allowing an attacker to alter program behavior or cause denial of service. The vulnerability requires user interaction (opening a crafted file) and local access. The impact on confidentiality, integrity, and availability is high according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should avoid opening untrusted .DSB files and apply general caution with file handling in DASYLab.