Out-of-Bounds Read Vulnerability in V-SFT 6.2.7.0 by Fuji Electric

CVE-2025-61861

What is CVE-2025-61861?

An out-of-bounds read vulnerability has been identified in the VS6ComFile!load_link_inf feature of V-SFT, specifically affecting version 6.2.7.0 and earlier. This flaw allows attackers to exploit specially crafted V-SFT files, potentially leading to unauthorized information disclosure, abnormal termination of the affected system (known as ABEND), and the possibility of arbitrary code execution. Users of V-SFT are advised to take caution and apply necessary security measures to mitigate the risks associated with this vulnerability.

References