CVE-2025-65085

Heap-based Buffer Overflow in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share

State: Published
Severity: 8.4 High
Published: Nov 25, 2025
Updated: May 12, 2026
Reserved: Nov 17, 2025

Description

A Heap-based Buffer Overflow vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary code.

Scores

CVSS	Score	Vector	Source
4.0	8.4 High	CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	icscert

Weaknesses

CWE-122 Heap-based Buffer Overflow

Affected Products

Product	Versions
CobaltAshlar-Vellum	12.6.1204.216 and earlierAffected
XenonAshlar-Vellum	12.6.1204.216 and earlierAffected
ArgonAshlar-Vellum	12.6.1204.216 and earlierAffected
LithiumAshlar-Vellum	12.6.1204.216 and earlierAffected
Cobalt ShareAshlar-Vellum	12.6.1204.216 and earlierAffected

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-329-01government-resource

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.