Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share

An attacker could execute arbitrary code on a workstation running affected CAD software by sending a malicious design file. This could compromise engineering workstations, potentially allowing theft of design data or lateral movement into corporate or operational networks.

Engineering and design teams using Ashlar-Vellum CAD software (Cobalt, Xenon, Argon, Lithium, Cobalt Share). This affects architectural, mechanical, and design firms, as well as any organization using these tools for facility planning or industrial design. Risk is highest when these workstations are connected to corporate or operational networks, as a compromised design workstation could enable lateral movement.

An attacker sends a specially crafted design file (.CO/.XE/.AR/.LI or supported import format) to a user. When the user opens the file in vulnerable Ashlar-Vellum software, the buffer overflow is triggered, allowing the attacker to run arbitrary code with the privileges of the user running the application.