Use-After-Free Vulnerability in Ashlar-Vellum Cobalt File Parsing

CVE-2025-2013

What is CVE-2025-2013?

A use-after-free vulnerability exists in the file parsing functionality of Ashlar-Vellum Cobalt. This flaw enables remote attackers to execute arbitrary code on systems running the affected software. The vulnerability stems from insufficient validation of object existence before performing operations, allowing an attacker to exploit the flaw by directing a user to visit a malicious web page or open a malicious CO file. When successfully exploited, the attacker can execute code within the context of the affected application process, leading to potential system compromise.

References