CVE-2025-53705

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of user-supplied data when parsing CO files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
Ashlar-Vellum	Cobalt	< 12.6.1204.204
Ashlar-Vellum	Xenon	< 12.6.1204.204
Ashlar-Vellum	Argon	< 12.6.1204.204
Ashlar-Vellum	Lithium	< 12.6.1204.204
Ashlar-Vellum	Cobalt Share	< 12.6.1204.204

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-224-01Third Party Advisory, US Government Resource

Timeline

Published: Aug 18, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-537076.1A reflected cross-site scripting (xss) vulnerability exists in the modifyTranscript functionality of MedDream PACS Premium 7.3.6.870. A spec CVE-2025-537095.4Secure-upload is a data submission service that validates single-use tokens when accepting submissions to channels. The service only install CVE-2025-53719.8A vulnerability, which was classified as critical, has been found in SourceCodester Health Center Patient Record Management System 1.0. Affe CVE-2025-537107.5Due to a product misconfiguration in certain deployment types, it was possible from different pods in the same namespace to communicate with CVE-2025-537117.5A vulnerability has been found in TP-Link TL-WR841N v11, TL-WR842ND v2 and TL-WR494N v3. The vulnerability exists in the /userRpm/WlanNetwor CVE-2025-537127.5A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/WlanNetworkRpm_AP.htm file due to missing CVE-2025-537137.5A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/WlanNetworkRpm_APC.htm file due to missing CVE-2025-537147.5A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/WzdWlanSiteSurveyRpm_AP.htm file due to mi CVE-2025-537157.5A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/Wan6to4TunnelCfgRpm.htm file due to missin CVE-2025-537166.5Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a CVE-2025-537177.0Reliance on untrusted inputs in a security decision in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to CVE-2025-537187.0Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.