CVE-2025-65086 — Out-of-bounds write in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share

CVE-2025-65086

Out-of-bounds write in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share PUBLISHED

Description (CNA)

An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to execute arbitrary code when a specially crafted VC6 file is being parsed.

Affected (CNA)

Vendor / product	Versions
Ashlar-Vellum / Cobalt	affected 0 through 12.6.1204.216
Ashlar-Vellum / Xenon	affected 0 through 12.6.1204.216
Ashlar-Vellum / Argon	affected 0 through 12.6.1204.216
Ashlar-Vellum / Lithium	affected 0 through 12.6.1204.216
Ashlar-Vellum / Cobalt Share	affected 0 through 12.6.1204.216

CWE

CWE-787

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-329-01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.