Fuji Electric V-SFT Out-of-Bounds Read Vulnerability Allowing Information Disclosure

An out-of-bounds read vulnerability has been identified in Fuji Electric V-SFT versions through 6.2.10.0. The issue occurs in the VS6ComFile!get_macro_mem_COM function, where opening a crafted V7 file may lead to unauthorized information disclosure from the affected product.

Impact

Exploitation of this vulnerability could result in unauthorized information exposure from the affected product.

Remediation

Users are advised to update to the latest version of V-SFT. The improvement information for the updated version 6.2.11.0 is available on the Fuji Electric website.