Out-of-Bounds Read Vulnerability in FUJI ELECTRIC's V-SFT Software
CVE-2026-107896

8.4HIGH

What is CVE-2026-107896?

The V-SFT software provided by FUJI ELECTRIC CO., LTD. has a vulnerability that permits an out-of-bounds read through the function VS6ComFile!load_gr_item when opening a specially crafted V7 file. This weakness can lead to potential information exposure and may allow attackers to execute arbitrary code within the affected software environment, posing significant risks to users relying on the integrity of this application.

Affected Version(s)

V-SFT 0 <= 6.2.11.0

References

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.