VYPR
← All advisories
High severity7.8NVD Advisory· Published Oct 26, 2023· Updated Jun 17, 2026

CVE-2023-39427

CVE-2023-39427

Description

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share v12 SP0 Build (1204.77), the affected applications lack proper validation of user-supplied data when parsing XE files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • Ashlar Vellum/Argon2 versions
    cpe:2.3:a:ashlar:argon:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ashlar:argon:*:*:*:*:*:*:*:*range: <12.4.1204.200
    • (no CPE)range: = 12 SP0 Build (1204.77)
  • Ashlar Vellum/Cobalt2 versions
    cpe:2.3:a:ashlar:cobalt:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ashlar:cobalt:*:*:*:*:*:*:*:*range: <12.4.1204.200
    • (no CPE)range: = 12 SP0 Build (1204.77)
  • Ashlar Vellum/Graphite
    cpe:2.3:a:ashlar:graphite:*:*:*:*:*:*:*:*
    Range: <=13.0.48
  • Ashlar Vellum/Lithium3 versions
    cpe:2.3:a:ashlar:lithium:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ashlar:lithium:*:*:*:*:*:*:*:*range: <12.4.1204.200
    • (no CPE)range: = 12 SP0 Build (1204.77)
    • (no CPE)range: v12 SP0 Build (1204.77)
  • Ashlar Vellum/Xenon2 versions
    cpe:2.3:a:ashlar:xenon:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ashlar:xenon:*:*:*:*:*:*:*:*range: <12.4.1204.200
    • (no CPE)range: = 12 SP0 Build (1204.77)
  • Ashlar Vellum/Cobalt Sharellm-fuzzy
    Range: = 12 SP0 Build (1204.77)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.