V-SFT v6.2.5 and Earlier Multiple Memory Safety Vulnerabilities (CVE-2025-47749 to 47756)

Critical Vulnerability Information Vulnerability ID JVNVD997228144 Affected Products V-SFT v6.2.5.0 and earlier versions Vulnerability Description V-SFT contains multiple vulnerabilities, including: Free of Pointer not at Start of Buffer (CVE-761) - CVSS:4.0 AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VH:H/VA:H/SC:N/SN:S/A:N Base Score 8.4 - CVSS:3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/E:H/A:H Base Score 7.8 - CVE-2025-47749 Out-of-bounds Write in VS6MemIniIF::set_temp_type_default function (CVE-787) - CVSS:4.0 AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VH:H/VA:H/SC:N/SN:S/A:N Base Score 8.4 - CVSS:3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/E:H/A:H Base Score 7.8 - CVE-2025-47750 Out-of-bounds Write in VS6EditData::CDataRomErrorCheck::MacroCommandCheck function (CVE-787) - CVSS:4.0 AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VH:H/VA:H/SC:N/SN:S/A:N Base Score 8.4 - CVSS:3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/E:H/A:H Base Score 7.8 - CVE-2025-47751 Out-of-bounds Write in VS6ComFile::MakeMelemGridZahyou function (CVE-787) - CVSS:4.0 AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VH:H/VA:H/SC:N/SN:S/A:N Base Score 8.4 - CVSS:3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/E:H/A:H Base Score 7.8 - CVE-2025-47752 Out-of-bounds Read in VS6EditData::CDrawsLine::GetRectArea function (CVE-125) - CVSS:4.0 AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VH:H/VA:H/SC:N/SN:S/A:N Base Score 8.4 - CVSS:3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/E:H/A:H Base Score 7.8 - CVE-2025-47753 Out-of-bounds Read in VS6EditData::Conv_Macro_Data function (CVE-125) - CVSS:4.0 AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VH:H/VA:H/SC:N/SN:S/A:N Base Score 8.4 - CVSS:3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/E:H/A:H Base Score 7.8 - CVE-2025-47754 Out-of-bounds Read in VS6EditData::VS4_SaveEnvFile function (CVE-125) - CVSS:4.0 AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VH:H/VA:H/SC:N/SN:S/A:N Base Score 8.4 - CVSS:3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/E:H/A:H Base Score 7.8 - CVE-2025-47755 Out-of-bounds Read in VS6EditData::CGammaDataRom::set_mr400_src function (CVE-125) - CVSS:4.0 AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VH:H/VA:H/SC:N/SN:S/A:N Base Score 8.4 - CVSS:3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/E:H/A:H Base Score 7.8 - CVE-2025-47756 Out-of-bounds Read in VS6MemIniIF::dllist_pic_type_default function (CVE-125) - CVSS:4.0 AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VH:H/VA:H/SC:N/SN:S/A:N Base Score 8.4 - CVSS:3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/E:H/A:H Base Score 7.8 - CVE-2025-47757 Stack-based Buffer Overflow in VS6File::CTxSubFile::get_ProgramFile_file_name function (CVE-121) - CVSS:4.0 AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VH:H/VA:H/SC:N/SN:S/A:N Base Score 8.4 - CVSS:3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/E:H/A:H Base Score 7.8 - CVE-2025-47758 Stack-based Buffer Overflow in VS6ComFile::CV7BaseMap::WriteV7DataToRom function (CVE-121) - CVSS:4.0 AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VH:H/VA:H/SC:N/SN:S/A:N Base Score 8.4 - CVSS:3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/E:H/A:H Base Score 7.8 - CVE-2025-47759 Stack-Based Buffer Overflow in VS6MemIniIF::set_temp_type_default function (CVE-121) - CVSS:4.0 AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VH:H/VA:H/SC:N/SN:S/A:N Base Score 8.4 - CVSS:3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/E:H/A:H Base Score 7.8 - CVE-2025-47760 Impact System abnormal termination (ABEND) Information disclosure Arbitrary code execution Solution Update the software to the latest version. Reporter Michael Heinzl reported these vulnerabilities to JPCERT/CC.

Goal Reached Thanks to every supporter — we hit 100%!

V-SFT v6.2.5 and Earlier Multiple Memory Safety Vulnerabilities (CVE-2025-47749 to 47756)