Stack-Based Buffer Overflow in V-SFT by Fujielectric
CVE-2025-47758

8.4HIGH

Key Information:

Status
Vendor
CVE Published:
19 May 2025

What is CVE-2025-47758?

The V-SFT product by Fujielectric, specifically version 6.2.5.0 and earlier, is susceptible to a stack-based buffer overflow vulnerability within the VS6File!CTxSubFile::get_ProgramFile_name function. This issue arises when users open specially crafted V7 or V8 files, potentially leading to system crashes, unauthorized information disclosure, or arbitrary code execution, thereby posing significant security risks to the users.

Affected Version(s)

V-SFT v6.2.5.0 and earlier

References

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.