Use After Free Vulnerability in V-SFT Graphic Editor by Fuji Electric
CVE-2022-29522

7.8HIGH

Key Information:

Vendor

Fuji Electric Co., Ltd. / Hakko Electronics Co., Ltd.

Status
V-sft
Vendor
CVE Published:
14 June 2022

What is CVE-2022-29522?

A use after free vulnerability has been identified within the simulator module of the graphic editor V-SFT, specifically in versions preceding 6.1.6.0. This weakness may allow an attacker to manipulate a specially crafted image file, potentially leading to unauthorized access to sensitive information or execution of arbitrary code when opened by an unsuspecting user. It is crucial for users to ensure that they are running the latest version of the software to mitigate this risk.

Affected Version(s)

V-SFT versions prior to v6.1.6.0

References

https://monitouch.fujielectric.com/site/download-e/09vsft...
x_refsource_MISC
https://jvn.jp/en/vu/JVNVU99188133/index.html
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.