CVE-2025-7995

Name of the Vulnerable Software and Affected Versions Ashlar-Vellum Cobalt (affected versions not specified)

Description A type confusion vulnerability exists in the parsing of CO files within Ashlar-Vellum Cobalt. This flaw stems from insufficient validation of user-supplied data, potentially allowing remote attackers to execute arbitrary code. User interaction is required, such as visiting a malicious page or opening a malicious file, to trigger the vulnerability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.