Out-of-Bounds Read Vulnerability in V-SFT By Fujielectric
CVE-2025-47757

8.4HIGH

Key Information:

Status
Vendor
CVE Published:
19 May 2025

What is CVE-2025-47757?

The V-SFT software by Fujielectric is susceptible to an out-of-bounds read vulnerability present in the VS6MemInIF.dll!set_plc_type_default function. This security flaw arises when processing specially crafted V7 or V8 files, potentially leading to application crashes, unauthorized information disclosures, and arbitrary code execution, thereby compromising the integrity of the system.

Affected Version(s)

V-SFT v6.2.5.0 and earlier

References

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.