CVE-2025-47751: High severity v-sft vulnerability
V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds write in VS6EditData!CDataRomErrorCheck::MacroCommandCheck function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47751?
CVE-2025-47751 is considered a critical vulnerability due to its potential to lead to arbitrary code execution.
How do I fix CVE-2025-47751?
To mitigate CVE-2025-47751, users should upgrade to V-SFT version 6.2.5.1 or later, which addresses the out-of-bounds write issue.
What types of attacks can CVE-2025-47751 facilitate?
CVE-2025-47751 can facilitate attacks that result in application crashes, information disclosure, and arbitrary code execution.
What is the impact of CVE-2025-47751 on my systems?
The impact of CVE-2025-47751 on affected systems includes potential system instability and unauthorized access to sensitive data.
Which versions of V-SFT are affected by CVE-2025-47751?
All versions of V-SFT up to and including 6.2.5.0 are affected by CVE-2025-47751.