Fuji Electric Monitouch V-SFT-6 Heap-Based and Stack-Based Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A buffer overflow vulnerability has been identified in Fuji Electric Monitouch V-SFT-6, specifically in version 6.2.7.0. The vulnerability arises from the software's handling of specially crafted project files, which can lead to heap-based and stack-based buffer overflows. These buffer overflows may allow an attacker to execute arbitrary code on the affected device.

Impact

Exploitation of this vulnerability can cause the device to crash and create a buffer overflow condition that may be exploited for remote code execution.

Remediation

Fuji Electric has released a patch for this vulnerability in the October 2025 update (V-SFT V6.2.9.0). Users are advised to update to version 6.2.9.0 or newer.