CVE-2024-13051

Summary

CVE-2024-13051 is a newly disclosed vulnerability affecting Ashlar-Vellum Graphite VC6. This issue involves a heap-based buffer overflow during file parsing, which can be exploited remotely to execute arbitrary code. The vulnerability lies in the lack of proper validation of user-supplied data length prior to copying it to a buffer. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. This flaw, previously known as ZDI-CAN-24977, poses a serious risk to affected installations of Ashlar-Vellum Graphite.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.