VYPR
← All advisories
High severity7.8NVD Advisory· Published Feb 4, 2025· Updated Jun 17, 2026

CVE-2023-39943

CVE-2023-39943

Description

In Ashlar-Vellum Cobalt versions prior to v12 SP2 Build (1204.200), the affected application lacks proper validation of user-supplied data when parsing XE files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Ashlar Vellum/Cobalt2 versions
    cpe:2.3:a:ashlar:cobalt:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ashlar:cobalt:*:*:*:*:*:*:*:*range: <12.4.1204.200
    • (no CPE)range: <v12 SP2 Build (1204.200)
  • Ashlar Vellum/Lithiumv5
    Range: 0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.