CVE-2026-64195: CWE-787 Out-of-bounds write in measX DASYLab

The vulnerability CVE-2026-64195 in measX DASYLab is due to a lack of proper validation of user-supplied data, leading to an out-of-bounds write condition (CWE-787). An attacker can exploit this by convincing a user to open a maliciously crafted .DSB file. This flaw affects all versions before 2026.0.0. The CVSS 3.1 base score is 8.5, reflecting high impact with local attack vector, low attack complexity, no privileges required, user interaction needed, and high impacts on confidentiality, integrity, and availability.

Successful exploitation can lead to arbitrary memory writes, potentially allowing an attacker to execute arbitrary code or cause a denial of service. The vulnerability impacts confidentiality, integrity, and availability with high severity. However, exploitation requires local access and user interaction (opening a crafted file). There are no known exploits in the wild at this time.

No official patch or fix is currently available for this vulnerability. Patch status is not yet confirmed—check the vendor advisory for current remediation guidance. Until a fix is released, users should avoid opening untrusted .DSB files and apply standard security precautions to limit exposure.