CVE-2023-39427

CVE-2023-39427 affects Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share v12 SP0 Build (1204.77). The root cause is insufficient validation of user-supplied XE file data, causing an out-of-bounds write that could enable arbitrary code execution in the current process. Related sources ...

CVE-2025-41392

CVE-2025-41392 affects Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share prior to 12.6.1204.204. The root cause is lack of validation of user-supplied data when parsing AR files, which can lead to an out-of-bounds read and allow arbitrary code execution in the current process. Public ...

CVE-2025-53705

Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204 contain a parsing flaw in CO files that can cause an out-of-bounds write, potentially allowing an attacker to execute arbitrary code in the current process. Multiple sources (NVD, Red Hat, CVE listing, P...

CVE-2025-52584

CVE-2025-52584 affects Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share prior to version 12.6.1204.204. The issue is a lack of input validation while parsing XE files, which can cause a heap-based buffer overflow and allow arbitrary code execution in the affected process. Public sour...

CVE-2025-46269

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share, versions before 12.6.1204.204 are affected. The issue is a heap-based buffer overflow caused by insufficient validation of user-supplied data when parsing VC6 files, leading to potential arbitrary code execution in the current proc...