VYPR
← All advisories
High severity7.8NVD Advisory· Published Aug 18, 2025· Updated Jun 17, 2026

CVE-2025-41392

CVE-2025-41392

Description

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supplied data when parsing AR files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • Ashlar Vellum/Argon2 versions
    cpe:2.3:a:ashlar:argon:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ashlar:argon:*:*:*:*:*:*:*:*range: <12.2.1204.204
    • (no CPE)range: <12.6.1204.204
  • Ashlar Vellum/Cobalt2 versions
    cpe:2.3:a:ashlar:cobalt:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ashlar:cobalt:*:*:*:*:*:*:*:*range: <12.2.1204.204
    • (no CPE)range: <12.6.1204.204
  • Ashlar Vellum/Cobalt Share2 versions
    cpe:2.3:a:ashlar:cobalt_share:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ashlar:cobalt_share:*:*:*:*:*:*:*:*range: <12.2.1204.204
    • (no CPE)range: <12.6.1204.204
  • Ashlar Vellum/Lithium3 versions
    cpe:2.3:a:ashlar:lithium:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ashlar:lithium:*:*:*:*:*:*:*:*range: <12.2.1204.204
    • (no CPE)range: <12.6.1204.204
    • (no CPE)range: 0
  • Ashlar Vellum/Xenon2 versions
    cpe:2.3:a:ashlar:xenon:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ashlar:xenon:*:*:*:*:*:*:*:*range: <12.2.1204.204
    • (no CPE)range: <12.6.1204.204

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.