BaseFortify

Publication date: 2025-10-10

Last updated on: 2025-10-27

Assigner: JPCERT/CC

Description

An out-of-bounds read vulnerability exists in VS6ComFile!get_ovlp_element_size of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-10

Last Modified

2025-10-27

Generated

2026-07-06

AI Q&A

2025-10-10

EPSS Evaluated

2026-07-05

NVD

CVE-2025-61862

EUVD

EUVD-2025-33716

Affected Vendors & Products

Vendor	Product	Version / Range
fujielectric	monitouch_v-sft	to 6.2.7.0 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is an out-of-bounds read in the function VS6ComFile!get_ovlp_element_size of V-SFT version 6.2.7.0 and earlier. It occurs when specially crafted V-SFT files are opened, which can cause the affected system to disclose information, crash abnormally (ABEND), or allow an attacker to execute arbitrary code.

Impact Analysis

The vulnerability can lead to information disclosure, abnormal termination of the affected system (ABEND), and arbitrary code execution, which could compromise system security and stability.

Hi! I’m here to help you understand CVE-2025-61862. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70