429 matches found
CVE-2025-7996 Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must...
CVE-2025-7994
Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution vulnerability (CVE-2025-7994) is documented across multiple sources. The flaw resides in parsing AR files, caused by insufficient validation of user-supplied data, which can lead to a read past the end of an allocated d...
CVE-2025-7994 Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must...
CVE-2025-7999 Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability
Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit...
CVE-2025-7999 Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability
Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit...
CVE-2025-7992
CVE-2025-7992 concerns Ashlar-Vellum Cobalt AR File Parsing, with an out-of-bounds read in AR file parsing that can allow code execution. The flaw arises from missing validation of user-supplied data during AR file parsing, as described in ZDI advisories; exploitation can occur when a user visits...
CVE-2025-7989 Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must...
CVE-2025-7989
Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read allows remote code execution. The flaw occurs in AR file parsing due to inadequate validation, enabling an attacker to read past the end of an allocated structure and execute code in the target process. Exploitation requires user interaction...
CVE-2025-7984 Ashlar-Vellum Cobalt AR File Parsing Uninitialized Variable Remote Code Execution Vulnerability
Ashlar-Vellum Cobalt AR File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target mu...
Ashlar-Vellum Cobalt 缓冲区错误漏洞
Ashlar-Vellum Cobalt is a 3D modeling software developed by Ashlar Vellum, which supports Windows and Mac systems, and is mainly used for 3D modeling and CAD drawing in industrial product design, architectural design and other fields. Ashlar-Vellum Cobalt suffers from an out-of-bounds read...
Ashlar-Vellum Cobalt 缓冲区错误漏洞
Ashlar-Vellum Cobalt is a 3D modeling software developed by Ashlar Vellum, which supports Windows and Mac systems, and is mainly used for 3D modeling and CAD drawing in industrial product design, architectural design and other fields. Ashlar-Vellum Cobalt suffers from an out-of-bounds read...
Ashlar-Vellum Cobalt 安全漏洞
Ashlar-Vellum Cobalt is a 3D modeling software developed by Ashlar Vellum, which supports Windows and Mac systems, and is mainly used for 3D modeling and CAD drawing in industrial product design, architectural design and other fields. A type-obfuscation vulnerability exists in Ashlar-Vellum Cobal...
Apple多款产品 安全漏洞
Apple watchOS is an operating system for smartwatches.Apple iPadOS is an operating system for iPad tablets.Apple visionOS is an operating system for AR glasses. A security vulnerability exists in several Apple products that stems from a logging issue that can be exploited by an attacker to cause ...
Side-Channel Inference of User Activities in AR/VR Using GPU Profiling
Over the past decade, AR/VR devices have drastically changed how we interact with the digital world. Users often share sensitive information, such as their location, browsing history, and even financial data, within third-party apps installed on these devices, assuming a secure environment...
Meta ignored child sex abuse in VR, say whistleblowers
Two former employees at Meta testified against the company at a Senate hearing this week, accusing it of downplaying the dangers of child abuse in its virtual reality VR environment. The whistleblowers say they saw incidents where children were asked for sex acts and nude photos in Facebook's VR...
Malicious code in readable-augmentedreality-transport-paleoceanography (npm)
The package readable-augmentedreality-transport-paleoceanography was found to contain malicious code...
MAL-2025-46173 Malicious code in supernova-indus-postgres-augmentedreality (npm)
The package supernova-indus-postgres-augmentedreality was found to contain malicious code...
MAL-2025-43537 Malicious code in augmentedreality-cz-conventional-changelog-elektra-bellatrix (npm)
The package augmentedreality-cz-conventional-changelog-elektra-bellatrix was found to contain malicious code...