Out-of-Bounds Read Vulnerability in V-SFT by Fuji Electric

CVE-2025-47756

What is CVE-2025-47756?

The V-SFT software from Fuji Electric, specifically versions 6.2.5.0 and earlier, is affected by an out-of-bounds read vulnerability. This issue arises in the VS6EditData!CGamenDataRom::set_mr400_strc function when processing specially crafted V7 or V8 files. Exploiting this vulnerability can lead to unintended behavior such as application crashes, potential information disclosure, and arbitrary code execution, posing significant security risks to systems using the affected versions.

References