CVE-2026-32928

Received Received - Intake

Stack-Based Buffer Overflow in V-SFT Allows Code Execution

Publication date: 2026-04-01

Last updated on: 2026-04-07

Assigner: JPCERT/CC

Description

V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CSaveData::_conv_AnimationItem. Opening a crafted V7 file may lead to arbitrary code execution on the affected product.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-04-01

Last Modified

2026-04-07

Generated

2026-07-06

AI Q&A

2026-04-02

EPSS Evaluated

2026-07-05

NVD

CVE-2026-32928

EUVD

EUVD-2026-18104

Affected Vendors & Products

Vendor	Product	Version / Range
fujielectric	v-sft	to 6.2.10.0 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Compliance Impact

The provided context and resources do not contain specific information regarding the impact of CVE-2026-32928 on compliance with common standards and regulations such as GDPR or HIPAA.

Mitigation Strategies

To mitigate this vulnerability, users should update the V-SFT software to version 6.2.11.0 or later, as this version addresses the stack-based buffer overflow issues.

Identify systems running V-SFT version 6.2.10.0 or earlier.
Obtain and install the V-SFT version 6.2.11.0 update from Fuji Electric.
Avoid opening untrusted or crafted V7 files that could trigger the vulnerability.

Executive Summary

This vulnerability is a stack-based buffer overflow found in V-SFT versions 6.2.10.0 and earlier, specifically in the function VS6ComFile!CSaveData::_conv_AnimationItem. It occurs when opening a specially crafted V7 file, which can cause the program to execute arbitrary code.

Impact Analysis

Exploiting this vulnerability can allow an attacker to execute arbitrary code on the affected system. This means the attacker could potentially take control of the system, leading to data loss, system compromise, or further attacks.

Hi! I’m here to help you understand CVE-2026-32928. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70