PT-2025-10647 · Ashlar Vellum · Ashlar-Vellum Cobalt

CVE-2025-2013

Publicado

2024-09-13

Atualizado

2025-08-18

CVSS v3.1

7.8

Alta

Vetor

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ashlar-Vellum Cobalt (affected versions not specified)

Description The issue is related to a use-after-free remote code execution vulnerability in the CO file parsing functionality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

BDU:2025-02608

CVE-2025-2013

ZDI-25-120

Ashlar-Vellum Cobalt