CNNVD-202509-2660 Information
Sep 17, 2025
cve
CNNVD ID
CNNVD-202509-2660
Related CVE
- CNNVD Published: 2025-09-17
Description (Chinese)
Ashlar-Vellum Graphite是Ashlar-Vellum公司的一款 CAD 建模软件。 Ashlar-Vellum Graphite存在安全漏洞，该漏洞源于解析VC6文件时未正确验证用户提供数据的长度，可能导致远程代码执行。
Description (English)
Ashlar-Vellum Graham is a CAD modeling software for Ashlar-Vellum. There is a security loophole in Ashlar-Vellam Graham, which stems from the failure to correctly verify the length of data provided by users when deconstructing VC6 files, which may lead to remote code execution.
Hazard Level
Medium
Vulnerability Type
其他
Affected Vendor
Ashlar-Vellum
Published
2025-09-17
Last Modified
2026-02-24
References
https://www.zerodayinitiative.com/advisories/ZDI-25-633/
Share on: