Remote Code Execution Vulnerability in Ashlar-Vellum Cobalt AR File Parsing

CVE-2025-7984

What is CVE-2025-7984?

This vulnerability arises from improper handling of AR file parsing in Ashlar-Vellum Cobalt. It allows remote attackers to execute arbitrary code on the affected installations. Exploitation requires the user to interact with a malicious page or open a harmful file, as the flaw stems from uninitialized memory being accessed during the parsing process. Attackers can leverage this vulnerability to execute code within the context of the current process, raising significant security concerns.

References