CVE-2024-13048
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Dec 30, 2024
Updated: Jan 3, 2025
CWE ID 787
Summary
CVE-2024-13048 is a remote code execution vulnerability affecting Ashlar-Vellum Cobalt XE. Malicious files or web pages can exploit this issue, which lies in the XE file parsing process. The flaw arises due to inadequate validation of user-supplied data, enabling attackers to write beyond the bounds of an allocated buffer. Successful exploitation allows the execution of arbitrary code in the context of the current process. (ZDI-CAN-24844)
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- C O B A L T
Affected Vendors
- Ashlar