CNNVD-202510-3945 Information
Oct 29, 2025
cve
CNNVD ID
CNNVD-202510-3945
Related CVE
- CNNVD Published: 2025-10-29
Description (Chinese)
Ashlar-Vellum Cobalt是Ashlar-Vellum公司的一种基于参数的计算机辅助设计和 3D 建模程序。 Ashlar-Vellum Cobalt存在资源管理错误漏洞，该漏洞源于解析CO文件时未验证对象是否存在，可能导致远程代码执行。
Description (English)
Ashlar-Vellam Cobalt is an argument-based computer-aided design and 3D modelling program for Ashlar-Vellum. Ashlar-Vellam Cobalt had a resource management error gap, which stemmed from the fact that the existence of the object had not been verified when the CO file was deciphered and could lead to remote code execution.
Hazard Level
Medium
Vulnerability Type
资源管理错误
Affected Vendor
Ashlar-Vellum
Published
2025-10-29
Last Modified
2026-02-24
References
https://www.zerodayinitiative.com/advisories/ZDI-25-956/
Share on: