Heap-based Buffer Overflow in Ashlar-Vellum Graphite VC6 File Parsing

CVE-2025-7983

What is CVE-2025-7983?

A heap-based buffer overflow vulnerability exists in Ashlar-Vellum Graphite during the parsing of VC6 files. The flaw occurs due to inadequate validation of the length of user-supplied data, which can lead to arbitrary code execution on the affected systems. Remote attackers can exploit this vulnerability if the target user visits a malicious page or opens a specially crafted file. This highlights the importance of stringent input validation mechanisms to safeguard against such exploitation attempts.

References