CVE-2026-19781
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required in that the target must visit a malicious page or open a malicious file.
Risk Assessment
A remote attacker could execute arbitrary code in the context of the current process, potentially leading to system compromise. Exploitation requires the user to open a malicious VS file.
Recommendation
Update Ashlar-Vellum Cobalt to the latest version. Avoid opening VS files from untrusted sources.
Other vulnerabilities in Ashlar-Vellum Cobalt
See all- CVE-2025-8006High
Remote code execution vulnerability in Ashlar-Vellum Cobalt when parsing XE files. It results from lack of validation of user-supplied data, leading to an out-of-bounds read past the end of an allocated data structure. Requires user interaction (visiting a malicious page or opening a malicious file).
- CVE-2025-8005High
Remote code execution vulnerability in Ashlar-Vellum Cobalt when parsing XE files. It results from lack of validation of user-supplied data, leading to a type confusion condition. Requires user interaction (visiting a malicious page or opening a malicious file).
- CVE-2025-8004High
Remote code execution vulnerability in Ashlar-Vellum Cobalt when parsing XE files. It results from lack of validation of user-supplied data, leading to an out-of-bounds read past the end of an allocated data structure. Requires user interaction (visiting a malicious page or opening a malicious file).
- CVE-2025-8003High
Remote code execution vulnerability in Ashlar-Vellum Cobalt when parsing CO files. It results from lack of validation of user-supplied data, leading to an out-of-bounds read past the end of an allocated data structure. Requires user interaction (visiting a malicious page or opening a malicious file).
- CVE-2025-8002High
Remote code execution vulnerability in Ashlar-Vellum Cobalt when parsing CO files. It results from lack of validation of user-supplied data, leading to a type confusion condition. Requires user interaction (visiting a malicious page or opening a malicious file).
- CVE-2025-8001High
Remote code execution vulnerability in Ashlar-Vellum Cobalt when parsing CO files. It results from lack of validation of user-supplied data, leading to a memory corruption condition. Requires user interaction (visiting a malicious page or opening a malicious file).
- CVE-2025-8000High
Remote code execution vulnerability in Ashlar-Vellum Cobalt when parsing LI files. It results from lack of validation of user-supplied data, leading to a type confusion condition. Requires user interaction (visiting a malicious page or opening a malicious file).
- CVE-2025-7999High
Remote code execution vulnerability in Ashlar-Vellum Cobalt when parsing AR files. It results from lack of validation of user-supplied data, leading to a type confusion condition. Requires user interaction (visiting a malicious page or opening a malicious file).
- CVE-2025-7998High
Remote code execution vulnerability in Ashlar-Vellum Cobalt when parsing CO files. It results from lack of validation of user-supplied data, leading to an out-of-bounds write past the end of an allocated data structure. Requires user interaction (visiting a malicious page or opening a malicious file).
- CVE-2025-7997High
Remote code execution vulnerability in Ashlar-Vellum Cobalt when parsing XE files. It results from lack of validation of user-supplied data, leading to an out-of-bounds read before the start of an allocated data structure. Requires user interaction (visiting a malicious page or opening a malicious file).
Original NVD description (English source)
Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of VS files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28173.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS