Description
An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary code when a specially crafted VC6 file is being parsed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ashlar-Vellum | Cobalt | ≤ 12.6.1204.216 | — |
| Ashlar-Vellum | Xenon | ≤ 12.6.1204.216 | — |
| Ashlar-Vellum | Argon | ≤ 12.6.1204.216 | — |
| Ashlar-Vellum | Lithium | ≤ 12.6.1204.216 | — |
| Ashlar-Vellum | Cobalt Share | ≤ 12.6.1204.216 | — |
Advisories 1
- ICSA-25-329-01 Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share (Update A) CISA ICS & IT advisories · May 12, 2026
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-329-01 government-resource