ZDI-26-870: Ashlar-Vellum Cobalt XE stack buffer overflow RCE
Ashlar-Vellum Cobalt XE file parsing vulnerability allows remote code execution with user interaction; ZDI assigned CVSS 7.8.
Stories per day · 30 days
3 RSS
2 stories, newest first · one card per story
Stories tagged #ashlar-vellum
ZDI-26-587: Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI advisory ZDI-26-587 details a heap-based buffer overflow RCE (CVE-2026-19781, CVSS 7.8) in Ashlar-Vellum Cobalt VS file parsing, requiring user interaction.