CVE-2025-53705 — Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share Out-of-bounds Write

Description (CNA)

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supplied data when parsing CO files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.

Affected (CNA)

Vendor / product	Versions
Ashlar-Vellum / Cobalt	affected 0 before 12.6.1204.204
Ashlar-Vellum / Xenon	affected 0 before 12.6.1204.204
Ashlar-Vellum / Argon	affected 0 before 12.6.1204.204
Ashlar-Vellum / Lithium	affected 0 before 12.6.1204.204
Ashlar-Vellum / Cobalt Share	affected 0 before 12.6.1204.204

CWE

CWE-787

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-224-01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.