CVE-2025-65084
CriticalSummary
An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary code.
Risk Assessment
This vulnerability poses a risk to organizations as it may lead to unauthorized access to data or remote code execution, potentially resulting in serious security implications.
Recommendation
It is recommended to update to the latest version of Ashlar-Vellum software to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share
See all- CVE-2025-65088High
An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary code when a specially crafted VC6 file is being parsed.
- CVE-2025-65087High
An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary code when a specially crafted VC6 file is being parsed.
- CVE-2025-65086High
An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to execute arbitrary code when a specially crafted VC6 file is being parsed.
- CVE-2025-65085Critical
A Heap-based Buffer Overflow vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior. This could allow an attacker to disclose information or execute arbitrary code.
Original NVD description (English source)
An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary code.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS