Out-of-Bounds Write Vulnerability in V-SFT by Fuji Electric

CVE-2025-47752

What is CVE-2025-47752?

The V-SFT by Fuji Electric, specifically versions 6.2.5.0 and earlier, contains a serious out-of-bounds write vulnerability in the VS6ComFile!MakeItemGlidZahyou function. This flaw can be exploited by opening specially crafted V7 or V8 files, potentially leading to system crashes, unauthorized information disclosure, and arbitrary code execution. Users are advised to apply necessary security updates and ensure that their systems are not running the affected versions.

References