{"affected":[{"defaultStatus":"unaffected","product":"DASYLab","source":"CNA: NI","vendor":"measX","versions":[{"lessThan":"2026.0.0","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2026-64200","cwes":["CWE-125"],"description":"There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data.   This results in a read a past the end of an allocated heap buffer during string conversion.  Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file.  This issue affects all versions before 2026.0.0.","epss":{"date":"2026-11-10","percentile":0.04962,"score":0.00158},"exploits":[],"kev":null,"metrics":[{"score":8.5,"severity":"high","source":"CNA: NI","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0"},{"score":7.8,"severity":"high","source":"CNA: NI","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1794408482483,"publishedAt":1788473194287,"references":[{"source":"CNA: NI","tags":[],"url":"https://www.measx.com/en/service/productsecurity/security-updates-for-measx-software/159-securityupdates/1070-out-of-bounds-read-vulnerabilities-in-dasylab-2.html"}],"remediation":[],"revision":"fd8d6906affd47b6a384e0ff599bd5d0b53482ace052cf6c6579dadfa98bd6ed","sources":[{"modifiedAt":1794408482483,"name":"CNA: NI","retrievedAt":1794409740350,"url":"https://www.cve.org/CVERecord?id=CVE-2026-64200"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794409762860,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-64200"}],"ssvc":{"assessedAt":1788541747511,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Out Of Bounds Read during string conversion when parsing a .DSB file in DASYLab","updatedAt":1794409762860}