CVE-2025-52584 — Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share Heap-based Buffer Overflow

Description (CNA)

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supplied data when parsing XE files. This could lead to a heap-based buffer overflow. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.

Affected (CNA)

Vendor / product	Versions
Ashlar-Vellum / Cobalt	affected 0 before 12.6.1204.204
Ashlar-Vellum / Xenon	affected 0 before 12.6.1204.204
Ashlar-Vellum / Argon	affected 0 before 12.6.1204.204
Ashlar-Vellum / Lithium	affected 0 before 12.6.1204.204
Ashlar-Vellum / Cobalt Share	affected 0 before 12.6.1204.204

CWE

CWE-122

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-224-01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.