Lucene search
+L

952 matches found

Cvelist
Cvelist
added 2026/05/12 8:25 p.m.51 views

CVE-2025-65087 Out-of-bounds read in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share

An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary code when a specially crafted VC6 file is being parsed...

8.4CVSS0.00165EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/12 8:25 p.m.5 views

CVE-2025-65087

An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary code when a specially crafted VC6 file is being parsed...

8.4CVSS6AI score0.00165EPSS
Exploits0References2
CVE
CVE
added 2026/05/12 8:25 p.m.31 views

CVE-2025-65087

CVE-2025-65087 is an Out-of-Bounds Read vulnerability in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share (versions 12.6.1204.216 and earlier). The flaw occurs while parsing VC6 files and could allow an attacker to disclose information or execute arbitrary code. Affected components a...

8.4CVSS6AI score0.00165EPSS
Exploits0References1Affected Software5
Vulnrichment
Vulnrichment
added 2026/05/12 8:22 p.m.8 views

CVE-2025-65086 Out-of-bounds write in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share

An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to execute arbitrary code when a specially crafted VC6 file is being parsed...

8.4CVSS6.2AI score0.00165EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/12 8:22 p.m.6 views

CVE-2025-65086

An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to execute arbitrary code when a specially crafted VC6 file is being parsed...

8.4CVSS6.2AI score0.00165EPSS
Exploits0References2
CVE
CVE
added 2026/05/12 8:22 p.m.39 views

CVE-2025-65086

The CVE-2025-65086 entry describes an Out-of-Bounds Write vulnerability in Ashlar-Vellum products Cobalt, Xenon, Argon, Lithium, and Cobalt Share, affected in version 12.6.1204.216 and earlier. The issue arises during parsing of a specially crafted VC6 file, allowing an attacker to execute arbitr...

8.4CVSS6.2AI score0.00165EPSS
Exploits0References1Affected Software5
Cvelist
Cvelist
added 2026/05/12 8:22 p.m.59 views

CVE-2025-65086 Out-of-bounds write in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share

An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to execute arbitrary code when a specially crafted VC6 file is being parsed...

8.4CVSS0.00165EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.10 views

Ashlar-Vellum多款产品 缓冲区错误漏洞

Ashlar-Vellum Xenon is a product of the Ashlar-Vellum company. Ashlar-Vellum Xenon is a CAD modeling software. Ashlar-Vellum Cobalt is a parametric computer-aided design and 3D modeling program. Ashlar-Vellum Argon is a 2D drafting and 3D modeling software. Several products from the Ashlar-Vellum...

8.4CVSS6.4AI score0.00165EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.15 views

PT-2026-40428

An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to execute arbitrary code when a specially crafted VC6 file is being parsed...

8.4CVSS6.2AI score0.00165EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.65 views

PT-2026-40430

An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary code when a specially crafted VC6 file is being parsed...

8.4CVSS6AI score0.00165EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.11 views

Ashlar-Vellum多款产品 缓冲区错误漏洞

Ashlar-Vellum Xenon is a product of the Ashlar-Vellum company. Ashlar-Vellum Xenon is a CAD modeling software. Ashlar-Vellum Cobalt is a parametric computer-aided design and 3D modeling program. Ashlar-Vellum Argon is a 2D drafting and 3D modeling software. Several products from the Ashlar-Vellum...

8.4CVSS6.2AI score0.00165EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.15 views

Ashlar-Vellum多款产品 缓冲区错误漏洞

Ashlar-Vellum Xenon is a product of the Ashlar-Vellum company. Ashlar-Vellum Xenon is a CAD modeling software. Ashlar-Vellum Cobalt is a parametric computer-aided design and 3D modeling program. Ashlar-Vellum Argon is a 2D drafting and 3D modeling software. Several products from the Ashlar-Vellum...

8.4CVSS6.2AI score0.00165EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.15 views

PT-2026-40429

An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary code when a specially crafted VC6 file is being parsed...

8.4CVSS6AI score0.00165EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2026/03/26 10:9 p.m.6 views

ImageMagick has possible memory leak in ASHLAR coder when action fails

The ASHLAR coder leaks a temporary image when an action fails and that could result to an out of memory...

5.8AI score
Exploits0References2Affected Software18
OSV
OSV
added 2026/03/26 10:9 p.m.3 views

GHSA-6P22-Q7W5-33PG ImageMagick has possible memory leak in ASHLAR coder when action fails

The ASHLAR coder leaks a temporary image when an action fails and that could result to an out of memory...

3.3CVSS5.9AI score0.00111EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/03/26 12:0 a.m.7 views

PT-2026-60118

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-19 Description A memory leak exists in the ASHLAR coder, which occurs when an action fails. An attacker can trigger these failed actions to exhaust memory resources, leading to a denial of service DoS, a...

4.8CVSS5.3AI score0.00111EPSS
Exploits0References8
SUSE CVE
SUSE CVE
added 2026/02/25 12:25 a.m.4 views

SUSE CVE-2026-25637

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak in the ASHLAR image writer allows an attacker to exhaust process memory by providing a crafted image that results in small objects that are allocated but never...

5.3CVSS5.8AI score0.00384EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2026/02/25 12:24 a.m.10 views

SUSE CVE-2026-25969

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak exists in coders/ashlar.c. The WriteASHLARImage allocates a structure. However, when an exception is thrown, the allocated memory is not properly released,...

4CVSS5.8AI score0.0036EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2026/02/25 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-25637

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak in the ASHLAR image writ...

5.3CVSS7.2AI score0.00384EPSS
Exploits0References2
OSV
OSV
added 2026/02/24 3:43 p.m.4 views

GHSA-XGM3-V4R9-WFGM Image Magick has a Memory Leak in coders/ashlar.c

Memory leak exists in coders/ashlar.c. The WriteASHLARImage allocates a structure. However, when an exception is thrown, the allocated memory is not properly released, resulting in a potential memory leak. bash ==78968== Memcheck, a memory error detector ==78968== Copyright C 2002-2022, and GNU...

5.3CVSS5.5AI score0.0036EPSS
Exploits0References5
Rows per page
Query Builder