CVE-2025-61863
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
An out-of-bounds read vulnerability exists in VS6ComFile!CSaveData::delete_mem of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.
Risk Assessment
An out-of-bounds read may result in data leakage and further exploitation of the vulnerability to execute arbitrary code.
Recommendation
Update V-SFT to a version later than 6.2.7.0 and avoid opening untrusted V-SFT files.
Other vulnerabilities in V-SFT
See all- CVE-2025-61864High
A use after free vulnerability exists in VS6ComFile!load_link_inf of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.
- CVE-2025-61862High
An out-of-bounds read vulnerability exists in VS6ComFile!get_ovlp_element_size of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.
- CVE-2025-61861High
An out-of-bounds read vulnerability exists in VS6ComFile!load_link_inf of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.
- CVE-2025-61860High
Out-of-bounds read vulnerability in VS6MemInIF!set_temp_type_default in V-SFT version 6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, abnormal end (ABEND), or arbitrary code execution.
- CVE-2025-61859High
Out-of-bounds write vulnerability in VS6ComFile!CItemDraw::is_motion_tween in V-SFT version 6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, abnormal end (ABEND), or arbitrary code execution.
- CVE-2025-61858High
An out-of-bounds write vulnerability exists in VS6ComFile!set_AnimationItem of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.
- CVE-2025-61857High
An out-of-bounds write vulnerability exists in VS6ComFile!CItemExChange::WinFontDynStrCheck of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.
- CVE-2025-61856High
Stack-based buffer overflow vulnerability in VS6ComFile!CV7BaseMap::WriteV7DataToRom in V-SFT version 6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, abnormal end (ABEND), or arbitrary code execution.
Original NVD description (English source)
An out-of-bounds read vulnerability exists in VS6ComFile!CSaveData::delete_mem of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS