An out-of-bounds read vulnerability exists in VS6ComFile!get_ovlp_element_size of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.

An out-of-bounds read vulnerability exists in VS6ComFile!get_ovlp_element_size of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.

V-SFT provided by FUJI ELECTRIC CO., LTD. contains multiple vulnerabilities listed below. <ul> <li>Stack-based buffer overflow in VS6ComFile!CV7BaseMap::WriteV7DataToRom (CWE-121) - CVE-2025-61856</li> <li>Out-of-bounds write in VS6ComFile!CItemExChange::WinFontDynStrCheck (CWE-787) - CVE-2025-61857</li> <li>Out-of-bounds write in VS6ComFile!set_AnimationItem (CWE-787) - CVE-2025-61858</li> <li>Out-of-bounds write in VS6ComFile!CItemDraw::is_motion_tween (CWE-787) - CVE-2025-61859</li> <li>Out-of-bounds read in VS6MemInIF!set_temp_type_default (CWE-125) - CVE-2025-61860</li> <li>Out-of-bounds read in VS6ComFile!load_link_inf (CWE-125) - CVE-2025-61861</li>< <li>Out-of-bounds read in VS6ComFile!get_ovlp_element_size (CWE-125) - CVE-2025-61862</li> <li>Out-of-bounds read in VS6ComFile!CSaveData::delete_mem (CWE-125) - CVE-2025-61863</li> <li>Use after free in VS6ComFile!load_link_inf (use-after-free) (CWE-416) - CVE-2025-61864</li> </ul> Michael Heinzl reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer.