Lucene search
K

12 matches found

CNVD
CNVD
added 2025/09/19 12:0 a.m.4 views

Ashlar-Vellum Cobalt Out-of-Bounds Read Vulnerability

Ashlar-Vellum Cobalt is a 3D modeling software developed by Ashlar Vellum, which supports Windows and Mac systems, and is mainly used for 3D modeling and CAD drawing in industrial product design, architectural design and other fields. Ashlar-Vellum Cobalt suffers from an out-of-bounds read...

7.8CVSS7.4AI score0.00193EPSS
Exploits0References1
CNVD
CNVD
added 2025/09/19 12:0 a.m.5 views

Ashlar-Vellum Cobalt Out-of-Bounds Read Vulnerability (CNVD-2025-22914)

Ashlar-Vellum Cobalt is a 3D modeling software developed by Ashlar Vellum, which supports Windows and Mac systems, and is mainly used for 3D modeling and CAD drawing in industrial product design, architectural design and other fields. Ashlar-Vellum Cobalt suffers from an out-of-bounds read...

7.8CVSS7.4AI score0.00189EPSS
Exploits0References1
NVD
NVD
added 2025/09/17 9:15 p.m.11 views

CVE-2025-7996

Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must...

7.8CVSS0.00193EPSS
Exploits0References1
NVD
NVD
added 2025/09/17 9:15 p.m.16 views

CVE-2025-7992

Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must...

7.8CVSS0.00193EPSS
Exploits0References1
CVE
CVE
added 2025/09/17 8:52 p.m.26 views

CVE-2025-7989

Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read allows remote code execution. The flaw occurs in AR file parsing due to inadequate validation, enabling an attacker to read past the end of an allocated structure and execute code in the target process. Exploitation requires user interaction...

7.8CVSS7.1AI score0.00189EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/09/17 12:0 a.m.2 views

Ashlar-Vellum Cobalt 安全漏洞

Ashlar-Vellum Cobalt is a 3D modeling software developed by Ashlar Vellum, which supports Windows and Mac systems, and is mainly used for 3D modeling and CAD drawing in industrial product design, architectural design and other fields. A type-obfuscation vulnerability exists in Ashlar-Vellum Cobal...

7.8CVSS7.5AI score0.00193EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/09/17 12:0 a.m.1 views

Ashlar-Vellum Cobalt 缓冲区错误漏洞

Ashlar-Vellum Cobalt is a 3D modeling software developed by Ashlar Vellum, which supports Windows and Mac systems, and is mainly used for 3D modeling and CAD drawing in industrial product design, architectural design and other fields. Ashlar-Vellum Cobalt suffers from an out-of-bounds read...

7.8CVSS7.3AI score0.00189EPSS
Exploits0References1
OSV
OSV
added 2025/08/18 9:15 p.m.2 views

CVE-2025-41392

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supplied data when parsing AR files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute...

8.4CVSS6.1AI score0.00153EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2025/05/05 12:0 a.m.4 views

The vulnerability of Cobalt Ashlar-Vellum’s software for parametric automated design and 3D modeling lies in its ability to read data beyond the buffer limit in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Cobalt Ashlar-Vellum software for parametric automated design and 3D modeling lies in the reading of data beyond the buffer in memory during the processing of AR format files. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.00229EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/26 12:0 a.m.3 views

The vulnerability of Cobalt Ashlar-Vellum’s software for parametric automated design and 3D modeling lies in its reliance on memory after it is released. This allows a hacker to execute arbitrary code.

The vulnerability of Cobalt Ashlar-Vellum’s parametric automated design and 3D modeling software lies in the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially crafted AR format files...

7.8CVSS7.7AI score0.00541EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/09/26 12:0 a.m.3 views

The vulnerability of Cobalt Ashlar-Vellum’s software for parametric automated design and 3D modeling lies in its reliance on memory after it is released. This allows a hacker to execute arbitrary code.

The vulnerability of Cobalt Ashlar-Vellum’s parametric automated design and 3D modeling software lies in the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially crafted AR format files...

7.8CVSS7.6AI score0.00541EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/09/26 12:0 a.m.4 views

The vulnerability of Cobalt Ashlar-Vellum’s parametric automated design and 3D modeling software lies in the ability to write beyond the buffer boundaries of memory, allowing an attacker to execute arbitrary code.

The vulnerability of Cobalt Ashlar-Vellum’s parametric automated design and 3D modeling software lies in the handling of memory buffer boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially crafted AR format files...

7.8CVSS7.8AI score0.00486EPSS
Exploits0References4
Rows per page
Query Builder