Out-of-Bounds Read Vulnerability in V-SFT by Fuji Electric

CVE-2025-61860

What is CVE-2025-61860?

An out-of-bounds read vulnerability has been identified in the V-SFT software, specifically within the VS6MemInIF module. This issue arises when opening specially crafted V-SFT files, which may potentially result in information leakage and could cause the affected system to experience an abnormal termination (ABEND). Moreover, exploitation of this vulnerability might allow attackers to execute arbitrary code, posing significant security risks to users of V-SFT versions prior to v6.2.7.0.

References