Out-of-Bounds Write Vulnerability in Fuji Electric Monitouch V-SFT-6
CVE-2025-53524

8.4HIGH

Key Information:

Vendor

Fuji Electric

Status
Monitouch V-sft-6
Vendor
CVE Published:
17 December 2025

What is CVE-2025-53524?

The Fuji Electric Monitouch V-SFT-6 software experiences a vulnerability due to an out-of-bounds write condition. This issue arises when processing specially crafted project files, potentially enabling attackers to manipulate memory and execute arbitrary code. Such a vulnerability poses significant risks to systems using this software, as it could allow unauthorized access and control over operations.

Affected Version(s)

Monitouch V-SFT-6 6.2.7.0

Monitouch V-SFT-6 6.2.8.0

Monitouch V-SFT-6 6.2.9.0 or newer.

References

https://felib.fujielectric.co.jp/en/document_search?tab=s...
https://www.cisa.gov/news-events/ics-advisories/icsa-25-3...
https://github.com/cisagov/CSAF/blob/develop/csaf_files/O...

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Rocco Calvi with TecSecurity working with Trend Micro Zero Day Initiative reported these vulnerabilities to CISA.
JSON
.
CVE-2025-53524 : Out-of-Bounds Write Vulnerability in Fuji Electric Monitouch V-SFT-6