CVE-2025-47755: High severity v-sft vulnerability
V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6EditData!VS4SaveEnvFile function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47755?
CVE-2025-47755 is considered a critical vulnerability due to potential arbitrary code execution and information disclosure.
How do I fix CVE-2025-47755?
To mitigate CVE-2025-47755, upgrade to V-SFT version 6.2.5.1 or later, which contains the necessary patches.
What types of attacks can exploit CVE-2025-47755?
CVE-2025-47755 can be exploited through specially crafted V7 or V8 files that trigger an out-of-bounds read when opened.
What software versions are affected by CVE-2025-47755?
CVE-2025-47755 affects V-SFT versions up to and including 6.2.5.0.
What are the potential consequences of exploiting CVE-2025-47755?
Exploiting CVE-2025-47755 can lead to application crashes, information disclosure, and arbitrary code execution on the affected system.