V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6MemInIF!set_temp_type_default. Opening a crafted V7 file may lead to information disclosure from the affected product.

V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6MemInIF!set_temp_type_default. Opening a crafted V7 file may lead to information disclosure from the affected product.

V-SFT provided by FUJI ELECTRIC CO., LTD. contains multiple vulnerabilities listed below.<a href='https://cwe.mitre.org/data/definitions/121.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/125.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/125.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/121.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/125.html' target='_blank'></a><ul><li>Stack-based buffer overflow in VS6ComFile!CV7BaseMap::WriteV7DataToRom (CWE-121) - CVE-2026-32925</li><li>Out-of-bounds read in VS6ComFile!load_link_inf (CWE-125) - CVE-2026-32926</li><li>Out-of-bounds read in VS6MemInIF!set_temp_type_default (CWE-125) - CVE-2026-32927</li><li>Stack-based buffer overflow in VS6ComFile!CSaveData::_conv_AnimationItem (CWE-121) - CVE-2026-32928</li><li>Out-of-bounds read in VS6ComFile!get_macro_mem_COM (CWE-125) - CVE-2026-32929</li></ul>Michael Heinzl reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer.