Skip to content
OpenAdvisories
High ICSA-25-224-01 4 CVEs

Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share

Published Aug 12, 2025 · Updated Aug 12, 2025

Vendor: Ashlar-Vellum Product: Argon Product: Cobalt Product: Cobalt Share Product: Lithium Product: Xenon

Summary

Successful exploitation of these vulnerabilities could allow an attacker to disclose information and execute arbitrary code.

Vulnerabilities 4

  • High 7.8
    CVE-2025-41392

    Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share Out-of-bounds Read

    In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supplied data when parsing AR files. This could lead to an out-of-bounds read. An attacker could leverag…

    Ashlar-Vellum Cobalt Argon Xenon
  • High 7.8
    CVE-2025-46269

    Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share Heap-based Buffer Overflow

    In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supplied data when parsing VC6 files. This could lead to a heap-based buffer overflow. An attacker could…

    Ashlar-Vellum Cobalt Xenon Lithium
  • High 7.8
    CVE-2025-52584

    Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share Heap-based Buffer Overflow

    In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supplied data when parsing XE files. This could lead to a heap-based buffer overflow. An attacker could …

    Ashlar-Vellum Cobalt Xenon Lithium
  • High 7.8
    CVE-2025-53705

    Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share Out-of-bounds Write

    In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supplied data when parsing CO files. This could lead to an out-of-bounds write. An attacker could levera…

    Ashlar-Vellum Cobalt Xenon Lithium

Revision history

  1. #1

    Initial Publication

References