CVE-2025-47752: High severity v-sft vulnerability
Published May 19, 2025
·Updated
V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds write in VS6ComFile!MakeItemGlidZahyou function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution.
Affected Software
2 affected components
V-SFT V-SFT<6.2.5.0
Fujielectric Monitouch V-sft>=6.0.1.0<6.2.6.0
Event History
May 19, 2025
CVE Published
via MITRE·07:44 AM
Data Sourced
via MITRE·07:44 AM
DescriptionSeverity
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-47752?
CVE-2025-47752 has a high severity due to its potential for crash, information disclosure, and arbitrary code execution.
2
How do I fix CVE-2025-47752?
To fix CVE-2025-47752, update to a version of V-SFT later than 6.2.5.0.
3
What type of vulnerability is CVE-2025-47752?
CVE-2025-47752 is categorized as an out-of-bounds write vulnerability.
4
Which software versions are affected by CVE-2025-47752?
CVE-2025-47752 affects V-SFT versions up to and including 6.2.5.0.
5
What can an attacker achieve by exploiting CVE-2025-47752?
An attacker exploiting CVE-2025-47752 can potentially execute arbitrary code, leading to system compromise.