CVE-2025-10203 – Relative Path Traversal Vulnerability in Digilent WaveForms

CVE ID : CVE-2025-10203

Published : Sept. 15, 2025, 4:27 p.m. | 26 minutes ago

Description : Relative path traversal vulnerability due to improper input validation in Digilent WaveForms that may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted .DWF3WORK file. This vulnerability affects Digilent WaveForms 3.24.3 and prior versions.

Severity: 8.5 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…