A Heap-based Buffer Overflow vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.207 and prior that could allow an attacker to disclose information or execute arbitrary code.

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction Active

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Ashlar
  • Argon
  • Cobalt
  • Cobalt Share
  • Lithium
  • Xenon

Configuration 1 [-]

OR cpe:2.3:a:ashlar:argon:*:*:*:*:*:*:*:*
cpe:2.3:a:ashlar:cobalt:*:*:*:*:*:*:*:*
cpe:2.3:a:ashlar:cobalt_share:*:*:*:*:*:*:*:*
cpe:2.3:a:ashlar:lithium:*:*:*:*:*:*:*:*
cpe:2.3:a:ashlar:xenon:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://www.cisa.gov/news-events/ics-advisories/icsa-25-329-01 cve-icon cve-icon
History

Fri, 28 Nov 2025 16:30:00 +0000

Type Values Removed Values Added
First Time appeared Ashlar cobalt Share
CPEs cpe:2.3:a:ashlar:argon:*:*:*:*:*:*:*:*
cpe:2.3:a:ashlar:cobalt:*:*:*:*:*:*:*:*
cpe:2.3:a:ashlar:cobalt_share:*:*:*:*:*:*:*:*
cpe:2.3:a:ashlar:lithium:*:*:*:*:*:*:*:*
cpe:2.3:a:ashlar:xenon:*:*:*:*:*:*:*:*
Vendors & Products Ashlar cobalt Share
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Thu, 27 Nov 2025 10:00:00 +0000

Type Values Removed Values Added
First Time appeared Ashlar
Ashlar argon
Ashlar cobalt
Ashlar lithium
Ashlar xenon
Vendors & Products Ashlar
Ashlar argon
Ashlar cobalt
Ashlar lithium
Ashlar xenon

Tue, 25 Nov 2025 18:00:00 +0000

Type Values Removed Values Added
Description A Heap-based Buffer Overflow vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.207 and prior that could allow an attacker to disclose information or execute arbitrary code.
Title Heap-based Buffer Overflow in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share
Weaknesses CWE-122
References
Metrics cvssV4_0

{'score': 8.4, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}
cve-icon MITRE

Status: PUBLISHED

Assigner: icscert

Published: 2025-11-25T17:49:58.145Z

Updated: 2025-11-25T20:22:20.520Z

Reserved: 2025-11-17T16:43:44.054Z

Link: CVE-2025-65085

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2025-11-25T18:15:54.283

Modified: 2025-11-28T16:24:43.090

Link: CVE-2025-65085

cve-icon Redhat

No data.