BaseFortify

Publication date: 2025-10-10

Last updated on: 2025-10-27

Assigner: JPCERT/CC

Description

An out-of-bounds read vulnerability exists in VS6MemInIF!set_temp_type_default of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-10

Last Modified

2025-10-27

Generated

2026-07-06

AI Q&A

2025-10-10

EPSS Evaluated

2026-07-05

NVD

CVE-2025-61860

EUVD

EUVD-2025-33694

Affected Vendors & Products

Vendor	Product	Version / Range
fujielectric	monitouch_v-sft	to 6.2.7.0 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is an out-of-bounds read in the VS6MemInIF!set_temp_type_default function of V-SFT version 6.2.7.0 and earlier. It occurs when specially crafted V-SFT files are opened, potentially causing information disclosure, abnormal termination of the affected system (ABEND), or arbitrary code execution.

Impact Analysis

The vulnerability can lead to serious impacts including unauthorized disclosure of sensitive information, unexpected system crashes (ABEND), and the possibility for attackers to execute arbitrary code on the affected system, which could compromise system integrity and security.

Hi! I’m here to help you understand CVE-2025-61860. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70