Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2025-7990: Ashlar-Vellum Cobalt can run malicious code if you open a bad file

CVE-2025-7990 · published 1 year ago

Summary

If you use Ashlar-Vellum Cobalt, an attacker could trick you into opening a file or visiting a website that contains malicious code. This could let the attacker take control of your computer. To protect yourself, make sure you only open files and visit websites from trusted sources.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
ashlar	cobalt	All versions `cpe:2.3:a:ashlar:cobalt:-:::::::*`

Original advisory text

Ashlar-Vellum Cobalt VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of VC6 files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25944.

References

https://www.zerodayinitiative.com/advisories/ZDI-25-638/ Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

7.8 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-787Out-of-bounds Write

Timeline

Published17 Sep 2025

Updated29 Oct 2026

First seen7 Mar 2026

Sources

CVE-2025-7990 · NVD

Track software like this

Free during beta