Out-of-Bounds Read Vulnerability in V-SFT by Fuji Electric
CVE-2026-107897

8.4HIGH

What is CVE-2026-107897?

The V-SFT application from Fuji Electric exhibits an out-of-bounds read vulnerability in the function VS6MemInIF!set_temp_type_default. This vulnerability can be exploited by crafting a V7 file, potentially leading to exposure of sensitive information or allowing attackers to execute arbitrary code on the system. Users of affected V-SFT versions should remain vigilant and consider implementing appropriate security measures to mitigate risks associated with this flaw.

Affected Version(s)

V-SFT 0 <= 6.2.11.0

References

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.