CVE-2025-47757: High severity v-sft vulnerability
V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6MemInIF.dll!setplctypedefault function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47757?
CVE-2025-47757 has been classified with a high severity due to its potential for arbitrary code execution and information disclosure.
How do I fix CVE-2025-47757?
To fix CVE-2025-47757, update to the latest version of V-SFT beyond 6.2.5.0 provided by the vendor.
What are the potential impacts of CVE-2025-47757?
The impacts of CVE-2025-47757 include application crashes, unauthorized information disclosure, and the possibility of arbitrary code execution.
Which versions of V-SFT are affected by CVE-2025-47757?
CVE-2025-47757 affects V-SFT version 6.2.5.0 and earlier.
What causes the vulnerability in CVE-2025-47757?
The vulnerability in CVE-2025-47757 is caused by an out-of-bounds read issue in the VS6MemInIF.dll during the handling of specially crafted V7 or V8 files.