CVE-2023-40222

In Ashlar-Vellum Cobalt versions prior to v12 SP2 Build (1204.200), the affected application lacks proper validation of user-supplied data when parsing CO files. This could lead to a heap-based buffer overflow. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.

• CWE-122

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-299-03Third Party Advisory, US Government Resource

Published

Feb 4, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-40217An issue was discovered in Python before 3.8.18, 3.9.x befor…5.3
• CVE-2023-40218An issue was discovered in the NPU kernel driver in Samsung …3.3
• CVE-2023-40219Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with…7.2
• CVE-2023-4022The Herd Effects WordPress plugin before 5.2.3 does not sani…4.8
• CVE-2023-40220Improper buffer restrictions in some Intel(R) NUC BIOS firmw…4.4
• CVE-2023-40221 The absence of filters when loading some sectio…8.8
• CVE-2023-40223Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-40224MISP 2.4.174 allows XSS in app/View/Events/index.ctp.6.1
• CVE-2023-40225HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.…7.2
• CVE-2023-4023The All Users Messenger WordPress plugin through 1.24 does n…4.3
• CVE-2023-40235An NTLM Hash Disclosure was discovered in ArchiMate Archi be…6.5
• CVE-2023-40236In Pexip VMR self-service portal before 3, the same SSH host…5.3