Stack-based Buffer Overflow in Ashlar-Vellum Graphite VC6 File Parsing

CVE-2025-7979

What is CVE-2025-7979?

The vulnerability allows remote attackers to execute arbitrary code on Ashlar-Vellum Graphite installations through a stack-based buffer overflow resulting from poor validation of data input when processing VC6 files. This flaw requires user interaction, as the target must open a malicious VC6 file or visit a harmful webpage to trigger the exploit. By bypassing the system's protections, an attacker can gain control over the affected system, leading to potential data breaches or system compromise.

References