VYPR
Unrated severityNVD Advisory· Published Feb 4, 2025· Updated Feb 5, 2025

Ashlar-Vellum Cobalt, Xenon, Argon, Lithium Heap-based Buffer Overflow

CVE-2023-40222

Description

In Ashlar-Vellum Cobalt versions prior to v12 SP2 Build (1204.200), the affected application lacks proper validation of user-supplied data when parsing CO files. This could lead to a heap-based buffer overflow. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.

Affected products

1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.