CVE-2023-39943
Ashlar-Vellum Cobalt, Xenon, Argon, Lithium Out-of-bounds Write
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Ashlar-Vellum Cobalt, Xenon, Argon, Lithium Out-of-bounds Write
In Ashlar-Vellum Cobalt versions prior to v12 SP2 Build (1204.200), the affected application lacks proper validation of user-supplied data when parsing XE files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.
Reserved 2023-08-10 | Published 2025-02-04 | Updated 2025-02-05 | Assigner icscertMichael Heinzl reported these vulnerabilities to CISA.
www.cisa.gov/news-events/ics-advisories/icsa-23-299-03
Support options
