Digilent DASYLab Memory Corruption Vulnerability Allowing Information Disclosure or Arbitrary Code Execution

A memory corruption vulnerability has been identified in Digilent DASYLab, all versions, due to an out-of-bounds read when loading a corrupted file. This vulnerability may lead to information disclosure or arbitrary code execution. Exploitation requires an attacker to persuade a user to open a specially crafted DASYLab file.

Impact

Exploitation of this vulnerability could result in memory corruption, allowing for information disclosure or arbitrary code execution.

Remediation

No fixes are available for this vulnerability. Users are advised to avoid opening files from untrusted sources.