CVE-2025-2017
CVSS 3.1 Score 7.7 of 10 (high)
Details
Published Mar 11, 2025
CWE ID 248
Summary
CVE-2025-2017 is a buffer overflow vulnerability affecting Ashlar-Vellum Cobalt's CO file parsing process. The flaw arises due to insufficient validation of user-supplied data before copying it to a buffer. This issue allows remote attackers to execute arbitrary code on affected installations, requiring user interaction through a malicious page or file. The vulnerability, identified as ZDI-CAN-25240, can lead to serious security consequences.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.