CVE-2022-29506: High severity fujielectric v-server firmware vulnerability
Out-of-bounds read vulnerability exist in the simulator module contained in the graphic editor 'V-SFT' v6.1.3.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-29506?
CVE-2022-29506 is an out-of-bounds read vulnerability in the simulator module of the graphic editor 'V-SFT' v6.1.3.0 and earlier.
What is the severity of CVE-2022-29506?
The severity of CVE-2022-29506 is high, with a severity value of 7.8.
How can an attacker exploit CVE-2022-29506?
An attacker can exploit CVE-2022-29506 by having a user open a specially crafted image file, which may allow them to obtain information and/or execute arbitrary code.
Which software versions are affected by CVE-2022-29506?
Fujielectric V-server versions up to and excluding 4.0.12.0, Fujielectric V-server Lite versions up to and excluding 4.0.13.0a, and Fujielectric V-sft versions up to and excluding 6.1.6.0 are affected by CVE-2022-29506.
How can I fix CVE-2022-29506?
To fix CVE-2022-29506, update to the latest version of Fujielectric V-server or Fujielectric V-sft.