Stack-Based Buffer Overflow in V-SFT by Fujielectric

CVE-2025-61856

What is CVE-2025-61856?

A stack-based buffer overflow vulnerability has been discovered in the WriteV7DataToRom function of V-SFT software, specifically in versions v6.2.7.0 and earlier. This vulnerability arises when specially crafted V-SFT files are opened, potentially leading to serious security issues such as abnormal end (ABEND) of the affected system and the possibility for an attacker to execute arbitrary code, thereby compromising system integrity and confidentiality.

References