Findings

CVE-2025-65086

An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an a…

Published May 12, 2026 · updated Oct 14, 2026 · ashlar argon

An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to execute arbitrary code when a specially crafted VC6 file is being parsed.

Timeline

Detection, updates, and resolution for this record.

  1. May 12, 2026 · NIST NVD

    Detected

    An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to execute arbitrary code when a specially crafted VC6 file is being parsed.

  2. Oct 14, 2026 · NIST NVD

    Updated

    An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to execute arbitrary code when a specially crafted VC6 file is being parsed.

Affected

  • cpe ashlar/argonversion unspecified
  • cpe ashlar/cobaltversion unspecified
  • cpe ashlar/cobalt shareversion unspecified
  • cpe ashlar/lithiumversion unspecified
  • cpe ashlar/xenonversion unspecified

Sources

  • CVE.orgCVE-2025-65086

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2025-65086

    An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to execute arbitrary code when a specially crafted VC6 file is being parsed.

    nvd.nist.gov

References

CVE-2025-65086 · ZeroDay Findings