CVE-2025-47749
HIGHFujielectric Monitouch V-sft < 6.2.6.0 - Information Disclosure
Title source: ruleDescription
V-SFT v6.2.5.0 and earlier contains an issue with free of pointer not at start of buffer in VS6EditData.dll!CWinFontInf::WinFontMsgCheck function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution.
Scores
CVSS v3
7.8
EPSS
0.0005
EPSS Percentile
14.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Classification
CWE
CWE-761
CWE-763
Status
published
Affected Products (1)
fujielectric/monitouch_v-sft
< 6.2.6.0
Timeline
Published
May 19, 2025
Tracked Since
Feb 18, 2026