CVE-2024-13050
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Dec 30, 2024
Updated: Jan 3, 2025
CWE ID 122
CWE ID 787
Summary
CVE-2024-13050 is a newly disclosed vulnerability affecting Ashlar-Vellum Graphite VC6. This issue permits remote code execution through a heap-based buffer overflow, which occurs during VC6 file parsing. The root cause is insufficient data validation before copying user-supplied data to a heap buffer. Exploitation necessitates user interaction, such as visiting a malicious webpage or opening a malicious file. This vulnerability carries the identifier ZDI-CAN-24976.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Graphite
Affected Vendors
- Orbitz
- Ashlar