CVE-2025-65085

A Heap-based Buffer Overflow vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary code.

Score

CVSS 3.1 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2025-11-25

Last modified

2026-10-18

Weaknesses

CWE-122

Affected products

• Argon (Ashlar)
• Cobalt (Ashlar)
• Cobalt Share (Ashlar)
• Lithium (Ashlar)
• Xenon (Ashlar)
• Argon (Ashlar-vellum)
• Cobalt (Ashlar-vellum)
• Cobalt Share (Ashlar-vellum)
• Lithium (Ashlar-vellum)
• Xenon (Ashlar-vellum)

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-25-329-01