Fuji Electric V-SFT Out-of-Bounds Read Vulnerability Allowing Information Disclosure

An out-of-bounds read vulnerability has been identified in Fuji Electric V-SFT versions through 6.2.10.0. The issue resides in the VS6ComFile component, specifically within the load_link_inf function. This vulnerability can be exploited by opening a crafted V7 file, potentially leading to unauthorized information disclosure from the affected product.

Impact

Exploitation of this vulnerability may result in unauthorized information disclosure.

Remediation

Users are advised to update the software to the latest version. The improvement information for V-SFT version 6.2.11.0 is available on the Fuji Electric website.