← Database

CVE-2025-10203

HIGH CVSS: 7.8 Published: 2025-09-15 Modified: 2026-06-17

Description

Relative path traversal vulnerability due to improper input validation in Digilent WaveForms that may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .DWF3WORK file. This vulnerability affects Digilent WaveForms 3.24.3 and prior versions.

Affected Platforms

Unknown

Weakness Type

CWE-23

References