Use-After-Free Vulnerability in Ashlar-Vellum Cobalt File Parsing

CVE-2025-11465

What is CVE-2025-11465?

The vulnerability in Ashlar-Vellum Cobalt arises during the parsing of CO files, where the application fails to properly validate the existence of an object before performing operations on it. This lack of validation could allow an attacker to execute arbitrary code on vulnerable systems, contingent upon the user interacting with a malicious page or file. Being aware of this vulnerability is crucial for maintaining the security of installations.

References