BaseFortify

Publication date: 2025-10-02

Last updated on: 2025-10-07

Assigner: JPCERT/CC

Description

VT STUDIO versions 8.53 and prior contain a use after free vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-02

Last Modified

2025-10-07

Generated

2026-07-06

AI Q&A

2025-10-02

EPSS Evaluated

2026-07-05

NVD

CVE-2025-61692

EUVD

EUVD-2025-32671

Affected Vendors & Products

Vendor	Product	Version / Range
keyence	vt_studio	to 8.53 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-416	The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Attack-Flow Graph

Executive Summary

This vulnerability is a use after free issue in VT STUDIO versions 8.53 and prior. It occurs when the product processes a specially crafted file, which can lead to arbitrary code execution on the affected system.

Impact Analysis

If exploited, this vulnerability can allow an attacker to execute arbitrary code on the affected product, potentially leading to unauthorized actions, data compromise, or system control.

Hi! I’m here to help you understand CVE-2025-61692. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70