Buffer Overflow Vulnerability in V-SFT by Fuji Electric
CVE-2025-47749

8.4HIGH

Key Information:

Status
Vendor
CVE Published:
19 May 2025

What is CVE-2025-47749?

V-SFT versions 6.2.5.0 and earlier contain a buffer overflow vulnerability due to improper handling of pointers in the VS6EditData.dll module. When users attempt to open specially crafted V7 or V8 files, the application may become unstable, leading to crashes. Additionally, this vulnerability potentially allows an attacker to disclose sensitive information or execute arbitrary code on the affected system, posing significant risks to data integrity and system security.

Affected Version(s)

V-SFT v6.2.5.0 and earlier

References

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.