CVE-2025-8000

Ashlar-Vellum Cobalt Li-file parsing is affected by a type-confusion vulnerability caused by insufficient validation of user-supplied data. The flaw can let an attacker execute code in the context of the current process after the target opens a malicious LI file or visits a malicious page, with u...

CVE-2025-7995

CVE-2025-7995 affects Ashlar-Vellum Cobalt. The vulnerability is a type confusion in CO file parsing caused by insufficient validation of user-supplied data, which can lead to remote code execution in the context of the current process. Exploitation requires user interaction (the target must visi...

CVE-2025-7998 Ashlar-Vellum Cobalt CO File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt CO File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must...

CVE-2025-7994

Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution vulnerability (CVE-2025-7994) is documented across multiple sources. The flaw resides in parsing AR files, caused by insufficient validation of user-supplied data, which can lead to a read past the end of an allocated d...

CVE-2025-7994 Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must...

CVE-2025-7999 Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit...

CVE-2025-7992 Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must...

CVE-2025-7987 Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit this vulnerability in that the target...

CVE-2025-7987

CVE-2025-7987 concerns Ashlar-Vellum Graphite VC6, where the VC6 file parsing path allows an out-of-bounds write, enabling remote code execution. The flaw stems from insufficient validation of user-supplied data during VC6 file parsing, which can cause a write past the end of an allocated buffer....

CVE-2025-7989 Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must...

CVE-2025-7990 Ashlar-Vellum Cobalt VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must...

CVE-2025-7985 Ashlar-Vellum Cobalt VC6 File Parsing Integer Overflow Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt VC6 File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must...

CVE-2025-7984 Ashlar-Vellum Cobalt AR File Parsing Uninitialized Variable Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt AR File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target mu...

CVE-2025-7984

Ashlar-Vellum Cobalt AR file parsing vulnerability (CVE-2025-7984) is confirmed across multiple sources. The flaw arises from uninitialized memory during AR file parsing, allowing code execution in the caller’s context. Exploitation requires user interaction (the target must open a malicious AR f...

CVE-2025-7983

CVE-2025-7983 affects Ashlar-Vellum Graphite and concerns a VC6 file parsing heap-based buffer overflow that enables remote code execution. The flaw stems from insufficient validation of the length of user-supplied data prior to copying it into a heap buffer, with exploitation requiring user inte...

CVE-2025-7979

CVE-2025-7979 affects Ashlar-Vellum Graphite VC6. The vulnerability is a stack-based buffer overflow in the VC6 file parsing component caused by insufficient validation of user-supplied data length prior to copying to a stack buffer. This enables remote code execution in the current process conte...

CVE-2025-7979 Ashlar-Vellum Graphite VC6 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Ashlar-Vellum Graphite VC6 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit this vulnerability in that the...

CVE-2025-7980 Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit this vulnerability in that the target...

CVE-2025-7980

CVE-2025-7980 affects Ashlar-Vellum Graphite VC6. The vulnerability is in the parsing of VC6 files, caused by insufficient validation of user-supplied data, leading to an out-of-bounds write and remote code execution. Impact is high and requires user interaction (target must open a malicious page...

CVE-2025-7977

The CVE-2025-7977 issue affects Ashlar-Vellum Cobalt LI parsing. It is described as an Out-Of-Bounds Read in LI file parsing that can lead to Remote Code Execution. The flaw arises from insufficient validation of user-supplied data during LI file parsing, causing a read before the start of an all...