CVE-2025-7986
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
An out-of-bounds write vulnerability in Ashlar-Vellum Graphite during VC6 file parsing allows remote code execution. User interaction is required — the target must open a malicious file or visit a malicious page. The flaw stems from lack of validation of user-supplied data, resulting in a write past the end of an allocated buffer.
Risk Assessment
An attacker can execute arbitrary code in the context of the current process, potentially leading to full compromise of the user's workstation. This is especially relevant in engineering and design environments where CAD files from untrusted sources are opened.
Recommendation
Update Ashlar-Vellum Graphite to the latest patched version and avoid opening VC6 files from untrusted sources. Consider restricting privileges of users who open design files.
Other vulnerabilities in Ashlar-Vellum Graphite
See all- CVE-2025-7988High
An out-of-bounds write vulnerability in Ashlar-Vellum Graphite during VC6 file parsing allows remote code execution. User interaction is required — the target must open a malicious file or visit a malicious page. The flaw stems from lack of validation of user-supplied data, resulting in a write past the end of an allocated buffer.
- CVE-2025-7987High
An out-of-bounds write vulnerability in Ashlar-Vellum Graphite during VC6 file parsing allows remote code execution. User interaction is required — the target must open a malicious file or visit a malicious page. The flaw stems from lack of validation of user-supplied data, resulting in a write past the end of an allocated buffer.
- CVE-2025-7983High
A vulnerability in Ashlar-Vellum Graphite when parsing VC6 files is caused by a heap-based buffer overflow. A remote attacker can execute arbitrary code if the user opens a malicious file or visits a malicious page.
- CVE-2025-7981High
A vulnerability in Ashlar-Vellum Graphite when parsing VC6 files is caused by use of an uninitialized variable. A remote attacker can execute arbitrary code if the user opens a malicious file or visits a malicious page.
- CVE-2025-7980High
A vulnerability in Ashlar-Vellum Graphite when parsing VC6 files is caused by an out-of-bounds write. A remote attacker can execute arbitrary code if the user opens a malicious file or visits a malicious page.
- CVE-2025-7979High
A vulnerability in Ashlar-Vellum Graphite when parsing VC6 files is caused by a stack-based buffer overflow. A remote attacker can execute arbitrary code if the user opens a malicious file or visits a malicious page.
- CVE-2025-7978High
A vulnerability in Ashlar-Vellum Graphite when parsing VC6 files is caused by use of an uninitialized variable. A remote attacker can execute arbitrary code if the user opens a malicious file or visits a malicious page.
Original NVD description (English source)
Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of VC6 files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25755.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS