CVE-2025-47756: High severity v-sft vulnerability
V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6EditData!CGamenDataRom::setmr400strc function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47756?
CVE-2025-47756 has a high severity due to its potential for information disclosure and arbitrary code execution.
How do I fix CVE-2025-47756?
To mitigate CVE-2025-47756, update to a version of V-SFT later than 6.2.5.0 that addresses the out-of-bounds read issue.
What vulnerabilities are associated with CVE-2025-47756?
CVE-2025-47756 is associated with out-of-bounds read vulnerabilities leading to crashes and possible arbitrary code execution.
Which versions of V-SFT are affected by CVE-2025-47756?
V-SFT versions up to and including 6.2.5.0 are affected by CVE-2025-47756.
What actions should be taken if using affected versions of V-SFT for CVE-2025-47756?
If using affected versions of V-SFT, users should immediately upgrade to a secure version to prevent exploitation.