CVE-2026-64200: CWE-125 Out-of-bounds read in measX DASYLab

The vulnerability CVE-2026-64200 in measX DASYLab is a CWE-125 out-of-bounds read caused by improper validation of user input. Specifically, when processing a .DSB file, the software may read beyond the allocated heap buffer during string conversion, potentially leading to information disclosure or application instability. Exploitation requires user interaction to open a maliciously crafted file. The issue affects all versions prior to 2026.0.0. There is no vendor advisory or patch currently available, and no known exploits in the wild have been reported.

Successful exploitation can lead to reading memory beyond the intended buffer, which may result in information disclosure or application crashes. The CVSS 4.0 score of 8.5 indicates a high severity with local attack vector, low attack complexity, no privileges required, user interaction needed, and high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should avoid opening untrusted or suspicious .DSB files to mitigate risk.