Out-of-Bounds Read Vulnerability in Ashlar-Vellum Cobalt XE File Parsing

CVE-2025-7997

What is CVE-2025-7997?

The vulnerability identified in Ashlar-Vellum Cobalt XE pertains to a flaw in the parsing of XE files, allowing for out-of-bounds reads due to insufficient validation of user-supplied data. This weakness enables remote attackers to execute arbitrary code on affected installations, with the requirement of user interaction, such as visiting a malicious webpage or opening a compromised file. By exploiting this vulnerability, an attacker can potentially execute harmful code in the context of the current process.

References