Heap-based Buffer Overflow Vulnerability in Ashlar-Vellum Cobalt CO File Parsing

CVE-2025-11464

What is CVE-2025-11464?

A heap-based buffer overflow vulnerability exists in Ashlar-Vellum Cobalt due to inadequate validation of user-supplied data length when parsing CO files. This flaw can be exploited remotely by attackers to execute arbitrary code within the context of the affected process. To successfully carry out the exploit, user action is required, such as visiting a compromised webpage or opening a malicious file. This security issue emphasizes the need for robust input validation mechanisms in software applications to prevent unauthorized code execution.

References