Fuji Electric V-SFT Use-After-Free Vulnerability in File Loading Component

A use-after-free vulnerability has been identified in the file loading component of Fuji Electric V-SFT version 6.2.7.0 and earlier. This vulnerability allows for information disclosure, abnormal termination of the affected system, and arbitrary code execution. The issue arises when specially crafted V-SFT files are opened.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure, an abnormal termination of the affected system, and the execution of arbitrary code.

Remediation

Users are advised to update to the latest version of V-SFT. Improvement information for the latest version can be found on the Fuji Electric Monitouch V-SFT improvement information page.