JVNDB-2025-015451
Vulnerability from jvndb - Published: 2025-10-09 13:39 - Updated:2025-10-09 13:39
Severity ?
Summary
Multiple vulnerabilities in FUJI Electric V-SFT
Details
V-SFT provided by FUJI ELECTRIC CO., LTD. contains multiple vulnerabilities listed below.
- Stack-based buffer overflow in VS6ComFile!CV7BaseMap::WriteV7DataToRom (CWE-121) - CVE-2025-61856
- Out-of-bounds write in VS6ComFile!CItemExChange::WinFontDynStrCheck (CWE-787) - CVE-2025-61857
- Out-of-bounds write in VS6ComFile!set_AnimationItem (CWE-787) - CVE-2025-61858
- Out-of-bounds write in VS6ComFile!CItemDraw::is_motion_tween (CWE-787) - CVE-2025-61859
- Out-of-bounds read in VS6MemInIF!set_temp_type_default (CWE-125) - CVE-2025-61860
- Out-of-bounds read in VS6ComFile!load_link_inf (CWE-125) - CVE-2025-61861 <
- Out-of-bounds read in VS6ComFile!get_ovlp_element_size (CWE-125) - CVE-2025-61862
- Out-of-bounds read in VS6ComFile!CSaveData::delete_mem (CWE-125) - CVE-2025-61863
- Use after free in VS6ComFile!load_link_inf (use-after-free) (CWE-416) - CVE-2025-61864
References
| Type | URL | |||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||||||||
Impacted products
| Vendor | Product | |
|---|---|---|
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-015451.html",
"dc:date": "2025-10-09T13:39+09:00",
"dcterms:issued": "2025-10-09T13:39+09:00",
"dcterms:modified": "2025-10-09T13:39+09:00",
"description": "V-SFT provided by FUJI ELECTRIC CO., LTD. contains multiple vulnerabilities listed below.\r\n\u003cul\u003e\r\n\u003cli\u003eStack-based buffer overflow in VS6ComFile!CV7BaseMap::WriteV7DataToRom (CWE-121) - CVE-2025-61856\u003c/li\u003e\r\n\r\n\u003cli\u003eOut-of-bounds write in VS6ComFile!CItemExChange::WinFontDynStrCheck (CWE-787) - CVE-2025-61857\u003c/li\u003e\r\n\r\n\u003cli\u003eOut-of-bounds write in VS6ComFile!set_AnimationItem (CWE-787) - CVE-2025-61858\u003c/li\u003e\r\n\r\n\u003cli\u003eOut-of-bounds write in VS6ComFile!CItemDraw::is_motion_tween (CWE-787) - CVE-2025-61859\u003c/li\u003e\r\n\r\n\u003cli\u003eOut-of-bounds read in VS6MemInIF!set_temp_type_default (CWE-125) - CVE-2025-61860\u003c/li\u003e\r\n\r\n\u003cli\u003eOut-of-bounds read in VS6ComFile!load_link_inf (CWE-125) - CVE-2025-61861\u003c/li\u003e\u003c\r\n\r\n\u003cli\u003eOut-of-bounds read in VS6ComFile!get_ovlp_element_size (CWE-125) - CVE-2025-61862\u003c/li\u003e\r\n\r\n\u003cli\u003eOut-of-bounds read in VS6ComFile!CSaveData::delete_mem (CWE-125) - CVE-2025-61863\u003c/li\u003e\r\n\r\n\u003cli\u003eUse after free in VS6ComFile!load_link_inf (use-after-free) (CWE-416) - CVE-2025-61864\u003c/li\u003e\r\n\u003c/ul\u003e\r\n\r\nMichael Heinzl reported these vulnerabilities to JPCERT/CC.\r\nJPCERT/CC coordinated with the developer.",
"link": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-015451.html",
"sec:cpe": {
"#text": "cpe:/a:fujielectric:v-sft",
"@product": "V-SFT",
"@vendor": "Fuji Electric Co., Ltd.",
"@version": "2.2"
},
"sec:cvss": {
"@score": "7.8",
"@severity": "High",
"@type": "Base",
"@vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"@version": "3.0"
},
"sec:identifier": "JVNDB-2025-015451",
"sec:references": [
{
"#text": "https://jvn.jp/en/vu/JVNVU90008453/index.html",
"@id": "JVNVU#90008453",
"@source": "JVN"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2025-61856",
"@id": "CVE-2025-61856",
"@source": "CVE"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2025-61857",
"@id": "CVE-2025-61857",
"@source": "CVE"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2025-61858",
"@id": "CVE-2025-61858",
"@source": "CVE"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2025-61859",
"@id": "CVE-2025-61859",
"@source": "CVE"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2025-61860",
"@id": "CVE-2025-61860",
"@source": "CVE"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2025-61861",
"@id": "CVE-2025-61861",
"@source": "CVE"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2025-61862",
"@id": "CVE-2025-61862",
"@source": "CVE"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2025-61863",
"@id": "CVE-2025-61863",
"@source": "CVE"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2025-61864",
"@id": "CVE-2025-61864",
"@source": "CVE"
},
{
"#text": "https://cwe.mitre.org/data/definitions/121.html",
"@id": "CWE-121",
"@title": "Stack-based Buffer Overflow(CWE-121)"
},
{
"#text": "https://cwe.mitre.org/data/definitions/125.html",
"@id": "CWE-125",
"@title": "Out-of-bounds Read(CWE-125)"
},
{
"#text": "https://cwe.mitre.org/data/definitions/416.html",
"@id": "CWE-416",
"@title": "Use After Free(CWE-416)"
},
{
"#text": "https://cwe.mitre.org/data/definitions/787.html",
"@id": "CWE-787",
"@title": "Out-of-bounds Write(CWE-787)"
}
],
"title": "Multiple vulnerabilities in FUJI Electric V-SFT"
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…