Heap-based Buffer Overflow Vulnerability in Ashlar-Vellum Cobalt

CVE-2026-121752

What is CVE-2026-121752?

A heap-based buffer overflow vulnerability exists in Ashlar-Vellum Cobalt due to improper validation of user-supplied data during the parsing of LI files. This oversight allows remote attackers to exploit the flaw by tricking a user into visiting a malicious webpage or opening a malicious file. When successfully executed, the attacker can run arbitrary code within the context of the vulnerable process, potentially leading to unauthorized actions or data compromise.

References