CVE-2026-64197

HighCVSS 7.3/10Last modified Sep 22, 2026

Description

There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structure. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions before 2026.0.0.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
measX	DASYLab	< 2026.0.0

References

https://www.measx.com/en/service/productsecurity/security-updates-for-measx-software/159-securityupdates/1071-out-of-bounds-write-vulnerabilities-in-dasylab-2.htmlVendor Advisory

Timeline

Published: Sep 3, 2026
Last modified: Sep 22, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-641987.3There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read a few byt CVE-2026-641997.3There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read outside t CVE-2026-64206.3A flaw was found in Keylime. An attacker with root access on an enrolled monitored machine, where the Keylime agent runs, can exploit a vuln CVE-2026-642007.3There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read a past th CVE-2026-642017.8There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code exe CVE-2026-642027.8There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code exe CVE-2026-642037.8There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code exe CVE-2026-642047.8There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code exe CVE-2026-642055.5In the Linux kernel, the following vulnerability has been resolved: i2c: i801: fix hardware state machine corruption in error path A sever CVE-2026-642068.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock l2ca CVE-2026-642075.5In the Linux kernel, the following vulnerability has been resolved: net/sched: dualpi2: fix GSO backlog accounting When DualPI2 splits a G CVE-2026-642087.5In the Linux kernel, the following vulnerability has been resolved: crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks C