CVE-2023-34310

CVE-2023-34310 affects Ashlar-Vellum Cobalt. The issue is an uninitialized memory access in the CO-file parser that can allow remote code execution. Exploitation requires user interaction (target must visit a malicious page or open a malicious file). The root cause is lack of proper memory initia...

CVE-2023-34309

The CVE-2023-34309 issue affects Ashlar-Vellum Cobalt. A flaw in the CO file parser occurs from insufficient validation of a user-supplied value before it is dereferenced as a pointer, enabling arbitrary code execution in the current process. Exploitation requires user interaction (visiting a mal...