Integer Overflow in Ashlar-Vellum Cobalt XE File Parsing

CVE-2025-11463

What is CVE-2025-11463?

The Ashlar-Vellum Cobalt XE software is vulnerable to an integer overflow during the parsing of XE files, allowing malicious actors to execute arbitrary code on the affected systems. The flaw arises from improper validation of user-supplied data, enabling attackers to exploit the vulnerability by enticing users to open crafted files or visit malicious web pages. Successful exploitation could lead to execution of harmful code with the privileges of the current user, establishing a significant security risk for those using this product.

References