Vulnerabilities > Ashlar > Cobalt

DATE CVE VULNERABILITY TITLE RISK
2024-12-30 CVE-2024-13044 Out-of-bounds Write vulnerability in Ashlar Cobalt 1204.90
Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.
local
low complexity
ashlar CWE-787
7.8
2024-12-30 CVE-2024-13045 Out-of-bounds Write vulnerability in Ashlar Cobalt 1204.90
Ashlar-Vellum Cobalt AR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.
local
low complexity
ashlar CWE-787
7.8
2024-12-30 CVE-2024-13046 Out-of-bounds Write vulnerability in Ashlar Cobalt 1204.90
Ashlar-Vellum Cobalt CO File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.
local
low complexity
ashlar CWE-787
7.8
2024-12-30 CVE-2024-13047 Type Confusion vulnerability in Ashlar Cobalt 1204.90
Ashlar-Vellum Cobalt CO File Parsing Type Confusion Remote Code Execution Vulnerability.
local
low complexity
ashlar CWE-843
7.8
2024-12-30 CVE-2024-13048 Out-of-bounds Write vulnerability in Ashlar Cobalt 1204.90
Ashlar-Vellum Cobalt XE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.
local
low complexity
ashlar CWE-787
7.8
2024-12-30 CVE-2024-13049 Type Confusion vulnerability in Ashlar Cobalt 1204.90
Ashlar-Vellum Cobalt XE File Parsing Type Confusion Remote Code Execution Vulnerability.
local
low complexity
ashlar CWE-843
7.8
2023-10-26 CVE-2023-39427 Out-of-bounds Write vulnerability in Ashlar products
In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share v12 SP0 Build (1204.77), the affected applications lack proper validation of user-supplied data when parsing XE files.
local
low complexity
ashlar CWE-787
7.8