CVE-2024-13045

Summary

CVE-2024-13045 is a remote code execution vulnerability affecting Ashlar-Vellum Cobalt software. Malicious AR files can exploit this issue by causing a stack-based buffer overflow in the parsing process. This flaw arises from insufficient validation of user-supplied data length prior to copying it to the buffer. Successful exploitation necessitates user interaction, such as visiting a malicious webpage or opening a malicious file. Attackers can execute arbitrary code in the context of the current process. This vulnerability was identified as ZDI-CAN-24848 in the Zero Day Initiative.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.