V-SFT Out-of-Bounds Read Vulnerability in CGamenDataRom::set_mr400_strc Function Allowing Crash, Information Disclosure, and Arbitrary Code Execution

An out-of-bounds read vulnerability has been identified in V-SFT version 6.2.5.0 and earlier, specifically within the VS6EditData!CGamenDataRom::set_mr400_strc function. This vulnerability arises when the application processes specially crafted V7 or V8 files, potentially leading to a crash, unauthorized information disclosure, and arbitrary code execution.

Impact

Exploitation of this vulnerability can cause the application to crash, disclose sensitive information, and execute arbitrary code on the affected system.

Remediation

Users are advised to update V-SFT to version 6.2.6.0 or later, where this vulnerability has been addressed.