Out-Of-Bounds Write Vulnerability in Ashlar-Vellum Cobalt Product

CVE-2025-7996

What is CVE-2025-7996?

The Ashlar-Vellum Cobalt application contains a vulnerability in the AR file parsing functionality. This flaw arises from insufficient validation of user-input data, leading to a potential write operation beyond the allocated memory boundaries. Consequently, this oversight could enable a remote attacker to execute arbitrary code on the system, contingent upon user interaction such as visiting a malicious webpage or opening a compromised file. Ensuring proper validation of input is crucial to mitigating the risks associated with this vulnerability.

References