Description
A heap-based buffer overflow vulnerability exists in VS6Sim.exe contained in V-SFT and TELLUS provided by FUJI ELECTRIC CO., LTD. Opening V9 files or X1 files specially crafted by an attacker on the affected product may lead to arbitrary code execution.
References (3)
Core 3
Core References
Third Party Advisory
https://jvn.jp/en/vu/JVNVU94011267/
Scores
CVSS v3
7.8
EPSS
0.0002
EPSS Percentile
6.2%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-122
Status
published
Products (2)
FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd./TELLUS
v4.0.20.0 and earlier
FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd./V-SFT-6
v6.2.5.0 and earlier
Published
Jul 08, 2025
Tracked Since
Feb 18, 2026