CVE-2023-42101

CVE-2023-42101 concerns Ashlar-Vellum Cobalt. The flaw is in the AR file parser, where insufficient validation of user-supplied data can cause a read past the end of an allocated buffer, enabling arbitrary code execution. Exploitation requires user interaction (target must visit a malicious page ...