Ashlar-Vellum Graphite vulnerabilities
8 known CVE vulnerabilities in Ashlar-Vellum Graphite, translated and rated.
- CVE-2025-7988High
An out-of-bounds write vulnerability in Ashlar-Vellum Graphite during VC6 file parsing allows remote code execution. User interaction is required — the target must open a malicious file or visit a malicious page. The flaw stems from lack of validation of user-supplied data, resulting in a write past the end of an allocated buffer.
- CVE-2025-7987High
An out-of-bounds write vulnerability in Ashlar-Vellum Graphite during VC6 file parsing allows remote code execution. User interaction is required — the target must open a malicious file or visit a malicious page. The flaw stems from lack of validation of user-supplied data, resulting in a write past the end of an allocated buffer.
- CVE-2025-7986High
An out-of-bounds write vulnerability in Ashlar-Vellum Graphite during VC6 file parsing allows remote code execution. User interaction is required — the target must open a malicious file or visit a malicious page. The flaw stems from lack of validation of user-supplied data, resulting in a write past the end of an allocated buffer.
- CVE-2025-7983High
A vulnerability in Ashlar-Vellum Graphite when parsing VC6 files is caused by a heap-based buffer overflow. A remote attacker can execute arbitrary code if the user opens a malicious file or visits a malicious page.
- CVE-2025-7981High
A vulnerability in Ashlar-Vellum Graphite when parsing VC6 files is caused by use of an uninitialized variable. A remote attacker can execute arbitrary code if the user opens a malicious file or visits a malicious page.
- CVE-2025-7980High
A vulnerability in Ashlar-Vellum Graphite when parsing VC6 files is caused by an out-of-bounds write. A remote attacker can execute arbitrary code if the user opens a malicious file or visits a malicious page.
- CVE-2025-7979High
A vulnerability in Ashlar-Vellum Graphite when parsing VC6 files is caused by a stack-based buffer overflow. A remote attacker can execute arbitrary code if the user opens a malicious file or visits a malicious page.
- CVE-2025-7978High
A vulnerability in Ashlar-Vellum Graphite when parsing VC6 files is caused by use of an uninitialized variable. A remote attacker can execute arbitrary code if the user opens a malicious file or visits a malicious page.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

