Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2025-10203

Relative Path Traversal Vulnerability in Digilent WaveForms

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NI

Description

Relative path traversal vulnerability due to improper input validation in Digilent WaveForms that may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .DWF3WORK file. This vulnerability affects Digilent WaveForms 3.24.3 and prior versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Digilent WaveForms

Default version status: unaffected

  • 0 to ≤ 3.24.3affected

References