Skip to content
OpenAdvisories
High ICSA-25-329-01 5 CVEs

Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share (Update A)

Published Nov 25, 2025 · Updated May 12, 2026 · Revision 2

Vendor: Ashlar-Vellum Product: Argon Product: Cobalt Product: Cobalt Share Product: Lithium Product: Xenon

Summary

Successful exploitation of these vulnerabilities could allow an attacker to disclose information or execute arbitrary code.

Vulnerabilities 5

  • High 8.4
    CVE-2025-65084

    Out-of-bounds Write in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share

    An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary code.

    Ashlar-Vellum Cobalt Xenon Lithium
  • High 8.4
    CVE-2025-65085

    Heap-based Buffer Overflow in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share

    A Heap-based Buffer Overflow vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary code.

    Ashlar-Vellum Cobalt Xenon Lithium
  • High 8.4
    CVE-2025-65086

    Out-of-bounds write in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share

    An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to execute arbitrary code when a specially crafted VC6 file is being parsed.

    Ashlar-Vellum Cobalt Argon Xenon
  • High 8.4
    CVE-2025-65087

    Out-of-bounds read in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share

    An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary code when a specially crafted VC6 file i…

    Ashlar-Vellum Cobalt Xenon Lithium
  • High 8.4
    CVE-2025-65088

    Out-of-bounds read in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share

    An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary code when a specially crafted VC6 file i…

    Ashlar-Vellum Cobalt Argon Xenon

Revision history

  1. #2

    Update A - Revised mitigation section, revised affected product versions, and addition of CVEs.

  2. #1

    Initial Publication

References