CVE-2026-32928

The CVE-2026-32928 entry affects FUJI Electric V-SFT (versions 6.2.10.0 and earlier). The root cause is a stack-based buffer overflow in VS6ComFile!CSaveData::_conv_AnimationItem when processing a crafted V7 file. Impact per the sources is potential arbitrary code execution on the affected produc...

CVE-2026-32926

CVE-2026-32926 affects Fuji Electric V-SFT. Affected versions: 6.2.10.0 and earlier. Root cause: an out-of-bounds read in VS6ComFile!load_link_inf when processing a crafted V7 file. Impact: information disclosure (permitted by the vulnerable component). Remediation: update the software to the lat...

CVE-2026-32925

V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CV7BaseMap::WriteV7DataToRom. Opening a crafted V7 file may lead to arbitrary code execution on the affected product...

HMI configuration software VS6EditData.dll WinFontMsgCheck() RCE

The vulnerability of the VS6EditData.dll function!CWinFontInf::WinFontMsgCheck in the HMI configuration software for Monitouch V-SFT is related to the release of an incorrect pointer. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information, execu...

CVE-2025-47754

V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6EditData!ConvMacroData function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution...