CVE-2025-65086: Out-of-bounds write in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share
An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to execute arbitrary code when a specially crafted VC6 file is being parsed.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Shareto a version that resolves this vulnerability.Fixed in 12.6.1204.217
Event History
Frequently Asked Questions
What is the severity of CVE-2025-65086?
CVE-2025-65086 has a critical severity level as it allows an attacker to execute arbitrary code.
How do I fix CVE-2025-65086?
To mitigate CVE-2025-65086, update Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share to version 12.6.1204.217 or later.
Which versions are affected by CVE-2025-65086?
CVE-2025-65086 affects Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and earlier.
What kind of vulnerability is CVE-2025-65086?
CVE-2025-65086 is categorized as an out-of-bounds write vulnerability.
Who is the vendor for the software affected by CVE-2025-65086?
The vendor for the software affected by CVE-2025-65086 is Ashlar-Vellum.