Out-of-Bounds Read Vulnerabilities in DASYLab
Created Aug 17, 2026
Overview
There are multiple out-of-bounds read vulnerabilities when parsing user-supplied files in DASYLab that may result in information disclosure or arbitrary code execution. Successful exploitation requires a user to open a specially crafted DSB file, and these vulnerabilities affect all versions of DASYLab before 2026.0.0 (Build 65).
This advisory covers CVE-2026-64198, CVE-2026-64199, and CVE-2026-64200.
Contents
- Mitigation Guidance
- Affected Products
- CVSS Score
- Further Information
- Acknowledgements
- Additional Resources
Mitigation Guidance
These issues are resolved in DASYLab 2026.0.0 (Build 65). measX recommends that users update to DASYLab 2026.0.0 (Build 65) or later and avoid opening DASYLab or DSB files from untrusted sources. Exploitation requires local user interaction in that the user must open a malicious DSB file, and the issues are not exploitable remotely.
Affected Products
| Product Version | Mitigation |
|---|---|
| DASYLab – all versions before 2026.0.0 (Build 65) | Update to DASYLab 2026.0.0 (Build 65) or later; avoid opening untrusted DASYLab or DSB files |
| DASYLab 2026.0.0 (Build 65) | Not affected |
CVSS Score
- CVE-2026-64198 – 7.8 (CVSS 3.1), vector: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H; 8.5 (CVSS 4.0), vector: AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N.
- CVE-2026-64199 – 7.8 (CVSS 3.1), vector: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H; 8.5 (CVSS 4.0), vector: AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N.
- CVE-2026-64200 – 7.8 (CVSS 3.1), vector: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H; 8.5 (CVSS 4.0), vector: AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N.
All three issues are classified as CWE-125 (Out-of-bounds Read).
Further Information
The vulnerabilities were reported against DASYLab 2024 (17.0.0), Build 20, and confirmed on Windows 10 22H2 x64.
CVE-2026-64198 is an out-of-bounds read in DSB file parsing caused by lack of proper validation of user-supplied data, resulting in a read a few bytes past the end of an allocated heap buffer during file handling.
CVE-2026-64199 is an out-of-bounds read in DSB file parsing caused by lack of proper validation of user-supplied data, resulting in a read outside the bounds of an allocated data structure.
CVE-2026-64200 is an out-of-bounds read in DSB file parsing caused by lack of proper validation of user-supplied data, resulting in a read past the end of an allocated heap buffer during string conversion.
All three vulnerabilities can result in information disclosure, and may allow an attacker to execute code in the context of the current process if a user opens a malicious DSB file.
Acknowledgements
measX credits Michael Heinzl for reporting these issues and coordinating disclosure.