CVE-2025-61857: High severity V-SFT V-SFT vulnerability
An out-of-bounds write vulnerability exists in VS6ComFile!CItemExChange::WinFontDynStrCheck of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-61857?
CVE-2025-61857 has a high severity rating due to its potential for arbitrary code execution and abnormal system termination.
How do I fix CVE-2025-61857?
To fix CVE-2025-61857, update to the latest version of V-SFT, which addresses the out-of-bounds write vulnerability.
What types of issues can CVE-2025-61857 cause?
CVE-2025-61857 can lead to information disclosure, application crashes, and the execution of arbitrary code.
Which versions of V-SFT are affected by CVE-2025-61857?
CVE-2025-61857 affects V-SFT versions up to 6.2.7.0.
Is CVE-2025-61857 a remote code execution vulnerability?
Yes, CVE-2025-61857 can be exploited for remote code execution by opening specially crafted V-SFT files.