CVE-2025-47749: High severity v-sft vulnerability
V-SFT v6.2.5.0 and earlier contains an issue with free of pointer not at start of buffer in VS6EditData.dll!CWinFontInf::WinFontMsgCheck function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47749?
CVE-2025-47749 is classified as a critical vulnerability due to its potential for arbitrary code execution and information disclosure.
How do I fix CVE-2025-47749?
To fix CVE-2025-47749, update your V-SFT software to a version later than 6.2.5.0 that addresses this vulnerability.
What are the potential consequences of CVE-2025-47749?
Exploitation of CVE-2025-47749 may result in application crashes, information disclosure, and unauthorized execution of arbitrary code.
Which versions of V-SFT are affected by CVE-2025-47749?
V-SFT versions up to and including 6.2.5.0 are affected by CVE-2025-47749.
What is the nature of the vulnerability in CVE-2025-47749?
CVE-2025-47749 involves improper handling of a pointer not at the start of a buffer, leading to potential crashes and security risks.