CVE-2025-61861: High severity V-SFT V-SFT vulnerability
An out-of-bounds read vulnerability exists in VS6ComFile!loadlinkinf of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-61861?
The severity of CVE-2025-61861 is considered high due to its potential for information disclosure and arbitrary code execution.
How do I fix CVE-2025-61861?
To fix CVE-2025-61861, upgrade to a version of V-SFT later than 6.2.7.0 that addresses this vulnerability.
What are the consequences of CVE-2025-61861?
The consequences of CVE-2025-61861 can include information disclosure, abnormal system termination, and possible arbitrary code execution.
Which versions of V-SFT are affected by CVE-2025-61861?
CVE-2025-61861 affects V-SFT versions 6.2.7.0 and earlier.
How can an attacker exploit CVE-2025-61861?
An attacker can exploit CVE-2025-61861 by opening specially crafted V-SFT files that trigger the out-of-bounds read condition.