Out-Of-Bounds Read Vulnerability in Ashlar-Vellum Cobalt XE

CVE-2025-8006

What is CVE-2025-8006?

The vulnerability presents itself during the parsing of XE files in Ashlar-Vellum Cobalt XE. The flaw arises from insufficient validation of user-supplied data, allowing an attacker to read beyond the allocated data structure. Consequently, this could lead to the execution of arbitrary code within the current process, provided that the user interacts by visiting a malicious site or opening a compromised file. Awareness and prompt action are crucial to mitigate potential exploitation.

References