Remote Code Execution Vulnerability in Ashlar-Vellum Cobalt CO File Parsing

CVE-2025-8002

What is CVE-2025-8002?

A vulnerability in Ashlar-Vellum Cobalt's CO file parsing process allows remote attackers to execute arbitrary code. The issue arises from inadequate validation of user-supplied data, leading to a type confusion condition. To exploit this vulnerability, an attacker must trick the target into visiting a malicious webpage or opening a compromised file. This flaw represents a significant risk as it enables unauthorized actions within the context of the current process, potentially compromising the user's system.

References