Fuji Electric V-SFT Out-of-Bounds Read Vulnerability Allowing Information Disclosure

An out-of-bounds read vulnerability has been identified in Fuji Electric V-SFT versions 6.2.10.0 and prior. The issue resides in the function 'VS6MemInIF!set_temp_type_default', where opening a crafted V7 file may lead to unauthorized information disclosure from the affected product.

Impact

Exploitation of this vulnerability could result in unauthorized information exposure or arbitrary code execution on the affected system.

Remediation

Users are advised to update the software to the latest version. The improvement information for V-SFT version 6.2.11.0 is available on the Fuji Electric website.