Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

15 records

Vendor: Ashlar-Vellum Component: Graphite Clear all filters
TI-2025-07308 CVE-2025-7988 · GHSA-xp4j-r83h-grgm

Out-of-bounds write in Ashlar-Vellum Graphite

Priority LOW 35

Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.0021 Published 2025-09-17 No fix listed CWE-787
TI-2025-07307 CVE-2025-7987 · GHSA-93h3-hm5p-x4r8

Out-of-bounds write in Ashlar-Vellum Graphite

Priority LOW 35

Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.0021 Published 2025-09-17 No fix listed CWE-787
TI-2025-07306 CVE-2025-7986 · GHSA-4rcx-c97p-6625

Out-of-bounds write in Ashlar-Vellum Graphite

Priority LOW 35

Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00205 Published 2025-09-17 No fix listed CWE-787
TI-2025-07303 CVE-2025-7983 · GHSA-cj75-2q24-r493

Heap-based buffer overflow in Ashlar-Vellum Graphite

Priority LOW 35

Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00224 Published 2025-09-17 No fix listed CWE-122
TI-2025-07299 CVE-2025-7979 · GHSA-g8jv-rq9c-mqcv

Stack-based buffer overflow in Ashlar-Vellum Graphite

Priority LOW 35

Ashlar-Vellum Graphite VC6 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00224 Published 2025-09-17 No fix listed CWE-121
TI-2025-07300 CVE-2025-7980 · GHSA-frg3-gpjv-x384

Out-of-bounds write in Ashlar-Vellum Graphite

Priority LOW 35

Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.0022 Published 2025-09-17 No fix listed CWE-787
TI-2024-12099 CVE-2024-13051 · GHSA-9qcv-f3w6-jhh5

Heap-based buffer overflow in Ashlar-Vellum Graphite

Priority LOW 36

Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00293 Published 2024-12-30 No fix listed CWE-122
TI-2024-12098 CVE-2024-13050 · GHSA-866w-76w7-m942

Heap-based buffer overflow in Ashlar-Vellum Graphite

Priority LOW 36

Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00293 Published 2024-12-30 No fix listed CWE-122
TI-2023-17142 CVE-2023-34308 · GHSA-4x78-cm4q-64gw

Out-of-bounds write in Ashlar-Vellum Graphite

Priority MEDIUM 42

Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00916 Published 2024-05-03 No fix listed CWE-787
TI-2023-17141 CVE-2023-34307 · GHSA-7ghf-82mv-88qr

Out-of-bounds write in Ashlar-Vellum Graphite

Priority MEDIUM 42

Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00889 Published 2024-05-03 No fix listed CWE-787
TI-2023-17140 CVE-2023-34306 · GHSA-67qc-hg3p-2xgj

Stack-based buffer overflow in Ashlar-Vellum Graphite

Priority MEDIUM 42

Ashlar-Vellum Graphite VC6 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00897 Published 2024-05-03 No fix listed CWE-121
TI-2023-20565 CVE-2023-39427 · GHSA-xxcp-3qr6-x6g4

Ashlar-Vellum Cobalt, Xenon, Argon, Lithium Out-of-bounds Write

Priority LOW 35

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share v12 SP0 Build (1204.77), the affected applications lack proper validation of user-supplied data when parsing XE files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00227 Published 2023-10-26 No fix listed CWE-787
TI-2023-20832 CVE-2023-39936 · GHSA-3f6x-6xxh-4m9v

Ashlar-Vellum Graphite Out-of-bounds Read

Priority LOW 36

In Ashlar-Vellum Graphite v13.0.48, the affected application lacks proper validation of user-supplied data when parsing VC6 files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00399 Published 2023-10-26 No fix listed CWE-125