Heap-based Buffer Overflow in Ashlar-Vellum Graphite VC6 File Parsing

CVE-2024-13050

What is CVE-2024-13050?

A buffer overflow vulnerability exists in Ashlar-Vellum Graphite during the parsing of VC6 files. The flaw arises from inadequate validation of user-supplied data length, enabling attackers to exploit this limitation. An attacker can initiate the exploitation by convincing a user to open a malicious VC6 file or visit a harmful web page. Successful exploitation could permit the execution of arbitrary code within the context of the current process, posing significant risks to affected installations.

References