CVE-2025-47754: High severity v-sft vulnerability
Published May 19, 2025
·Updated
V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6EditData!ConvMacroData function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution.
Affected Software
2 affected components
V-SFT V-SFT<6.2.5.0
Fujielectric Monitouch V-sft>=6.0.1.0<6.2.6.0
Event History
May 19, 2025
CVE Published
via MITRE·07:45 AM
Data Sourced
via MITRE·07:45 AM
DescriptionSeverity
Sep 1, 57367
Event
via FIRST·03:26 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-47754?
CVE-2025-47754 has a high severity level due to potential crash, information disclosure, and arbitrary code execution risks.
2
How do I fix CVE-2025-47754?
To mitigate CVE-2025-47754, users should update to the latest version of V-SFT beyond 6.2.5.0.
3
What types of attacks can exploit CVE-2025-47754?
CVE-2025-47754 can be exploited through specially crafted V7 or V8 files that trigger the out-of-bounds read vulnerability.
4
Which versions of V-SFT are affected by CVE-2025-47754?
V-SFT versions 6.2.5.0 and earlier are affected by CVE-2025-47754.
5
Are there any known workarounds for CVE-2025-47754?
Currently, there are no recommended workarounds for CVE-2025-47754 other than upgrading the software.