Remote Code Execution Vulnerability in Ashlar-Vellum Graphite

CVE-2025-7978

What is CVE-2025-7978?

A vulnerability has been identified in Ashlar-Vellum Graphite stemming from improper handling of VC6 file parsing. The issue arises due to uninitialized variables that allow remote attackers to execute arbitrary code when a user opens a specially crafted VC6 file or visits a malicious web page. Successful exploitation could lead to code execution in the context of the current process, posing significant risks to affected installations. Users are advised to exercise caution and implement recommended security measures to mitigate exposure to this vulnerability.

References