CVE-2023-35714

Ashlar-Vellum Cobalt (IGS) is affected by CVE-2023-35714. The vulnerability arises in the parsing of IGS files, due to improper validation of user-supplied data, causing a read-before-start of an allocated buffer (out-of-bounds read). This can enable remote code execution with the attacker’s code...