CVE-2025-2023— Ashlar-Vellum Cobalt LI File Parsing Integer Overflow Remote Code Execution Vulnerability
Quick assessment
Affected
Ashlar-Vellum Cobalt
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Ashlar-Vellum Cobalt是Ashlar-Vellum公司的一种基于参数的计算机辅助设计和 3D 建模程序。 Ashlar-Vellum Cobalt存在输入验证错误漏洞，该漏洞源于解析LI文件时整数溢出，可能导致远程代码执行。
Possible ATT&CK Techniques 2 AI
T1189 · Drive-by Compromise T1203 · Exploitation for Client Execution
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-2023
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Ashlar-Vellum Cobalt LI File Parsing Integer Overflow Remote Code Execution Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Ashlar-Vellum Cobalt LI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of LI files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25348.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
整数溢出或超界折返
Source: CVE Program / CVE List V5
Vulnerability Title
Ashlar-Vellum Cobalt 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Ashlar-Vellum Cobalt是Ashlar-Vellum公司的一种基于参数的计算机辅助设计和 3D 建模程序。 Ashlar-Vellum Cobalt存在输入验证错误漏洞，该漏洞源于解析LI文件时整数溢出，可能导致远程代码执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Ashlar-Vellum | Cobalt | 1204.91 | - |
|
II. Public POCs for CVE-2025-2023
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-2023
请登录查看更多情报信息。
Vendor Advisories for CVE-2025-2023 (1)
-
ZDI-25-122 | Zero Day Initiative x_research-advisory
Same Patch Batch · Ashlar-Vellum · 2025-03-11 · 12 CVEs total
| CVE-2025-2016 | Ashlar-Vellum Cobalt VC6 File Parsing Type Confusion Remote Code Execution Vulnerability | |
| CVE-2025-2013 | Ashlar-Vellum Cobalt CO File Parsing Use-After-Free Remote Code Execution Vulnerability | |
| CVE-2025-2020 | Ashlar-Vellum Cobalt VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerabil | |
| CVE-2025-2012 | Ashlar-Vellum Cobalt VS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerabilit | |
| CVE-2025-2017 | Ashlar-Vellum Cobalt CO File Parsing Buffer Overflow Remote Code Execution Vulnerability | |
| CVE-2025-2022 | Ashlar-Vellum Cobalt VS File Parsing Type Confusion Remote Code Execution Vulnerability | |
| CVE-2025-2015 | Ashlar-Vellum Cobalt VS File Parsing Type Confusion Remote Code Execution Vulnerability | |
| CVE-2025-2018 | Ashlar-Vellum Cobalt VS File Parsing Type Confusion Remote Code Execution Vulnerability | |
| CVE-2025-2019 | Ashlar-Vellum Cobalt VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vul | |
| CVE-2025-2014 | Ashlar-Vellum Cobalt VS File Parsing Use of Uninitialized Variable Remote Code Execution V | |
| CVE-2025-2021 | Ashlar-Vellum Cobalt XE File Parsing Integer Overflow Remote Code Execution Vulnerability |
IV. Related Vulnerabilities
Same product: Cobalt
-
CVE-2025-65088
Out-of-bounds read in Ashlar-Vellum Cobalt, Xenon, Argon, Li -
CVE-2025-65087
Out-of-bounds read in Ashlar-Vellum Cobalt, Xenon, Argon, Li -
CVE-2025-65086
Out-of-bounds write in Ashlar-Vellum Cobalt, Xenon, Argon, L -
CVE-2025-65085
Heap-based Buffer Overflow in Ashlar-Vellum Cobalt, Xenon, A -
CVE-2025-65084
Out-of-bounds Write in Ashlar-Vellum Cobalt, Xenon, Argon, L
Same vendor: Ashlar-Vellum
-
CVE-2025-65088
Out-of-bounds read in Ashlar-Vellum Cobalt, Xenon, Argon, Li -
CVE-2025-65087
Out-of-bounds read in Ashlar-Vellum Cobalt, Xenon, Argon, Li -
CVE-2025-65086
Out-of-bounds write in Ashlar-Vellum Cobalt, Xenon, Argon, L -
CVE-2025-65085
Heap-based Buffer Overflow in Ashlar-Vellum Cobalt, Xenon, A -
CVE-2025-65084
Out-of-bounds Write in Ashlar-Vellum Cobalt, Xenon, Argon, L
Same weakness: CWE-190
-
CVE-2026-77219
GNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Image Loa -
CVE-2026-18670
Vulnerabilities in IBM AIX and PowerVM VIOS -
CVE-2026-17160
Vulnerabilities in IBM AIX and PowerVM VIOS -
CVE-2026-17159
Vulnerabilities in IBM AIX and PowerVM VIOS -
CVE-2026-69419
Azure Data Manager for Energy Remote Code Execution Vulnerab
V. Comments for CVE-2025-2023
No comments yet