CVE-2025-10203 - CVE House
Back to Database
Status published High CVE-2025-10203

Relative Path Traversal Vulnerability in Digilent WaveForms

Vulnerability Description

Relative path traversal vulnerability due to improper input validation in Digilent WaveForms that may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .DWF3WORK file. This vulnerability affects Digilent WaveForms 3.24.3 and prior versions.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-10203

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • kimiya working with Trend Micro Zero Day Initiative

References

More from Digilent

View All →
CVE-2025-9189
Out Of Bounds Write when parsing a DSB file with Digilent DASYLab
High 8.5
CVE-2025-9188
Deserialization of Untrusted Data when parsing a DSB file with Digilent DASYLab
High 8.5
CVE-2025-57778
Out Of Bounds Write to invalid source address when parsing a DSB file with Digilent DASYLab
High 8.5
CVE-2025-57777
Out Of Bounds Write in displ2.dll when parsing a DSB file with Digilent DASYLab
High 8.5
CVE-2025-57776
Out Of Bounds Write to invalid address when parsing a DSB file with Digilent DASYLab
High 8.5

Affected Vendor

Affected Software

WaveForms
Vulnerable Versions:
0

Timeline

Official Publish: September 15th, 2025
Last Modified: September 15th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-23

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1005 Data from Local System
Collection
T1552 Unsecured Credentials
Credential Access
T1105 Ingress Tool Transfer
Command and Control
T1565 Data Manipulation
Impact