CVE-2025-47753: High severity v-sft vulnerability
V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6EditData!CDrawSLine::GetRectArea function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47753?
CVE-2025-47753 is rated as critical due to potential arbitrary code execution and information disclosure.
What are the impacts of CVE-2025-47753?
CVE-2025-47753 can lead to application crashes, information disclosure, and execution of arbitrary code when vulnerable files are processed.
How do I fix CVE-2025-47753?
To fix CVE-2025-47753, update V-SFT to version 6.2.5.1 or later, as the vulnerability is addressed in these versions.
Which versions of V-SFT are affected by CVE-2025-47753?
V-SFT versions 6.2.5.0 and earlier are affected by CVE-2025-47753.
How can I mitigate the risk of CVE-2025-47753?
Mitigating the risk of CVE-2025-47753 involves avoiding opening V7 or V8 files from untrusted sources until the software is updated.