CVE-2025-11463

Name of the Vulnerable Software and Affected Versions Ashlar-Vellum Cobalt XE (affected versions not specified)

Description A flaw exists in the parsing of XE files within Ashlar-Vellum Cobalt, stemming from insufficient validation of user-supplied data. This can lead to an integer overflow during buffer allocation, potentially allowing a remote attacker to execute arbitrary code. User interaction is required, such as visiting a malicious page or opening a malicious file, to trigger the issue. The attacker can execute code within the context of the current process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.