Out-of-Bounds Write Vulnerability in Ashlar-Vellum Products
CVE-2025-65084

8.4HIGH

Key Information:

Vendor

Ashlar-vellum

Status
Cobalt
Xen Projecton
Argon
Lithium
Vendor
CVE Published:
25 November 2025

What is CVE-2025-65084?

An Out-of-Bounds Write vulnerability in Ashlar-Vellum's products allows attackers to potentially disclose sensitive information or execute arbitrary code. This impacts the Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.207 and earlier, exposing these platforms to significant risks if not addressed promptly. It is crucial for users to implement patches and follow recommended security practices to mitigate these risks.

Affected Version(s)

Argon 0 <= 12.6.1204.207

Cobalt 0 <= 12.6.1204.207

Cobalt Share 0 <= 12.6.1204.207

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-3...
government-resource

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Michael Heinzl reported these vulnerabilities to CISA.
JSON
.