Back to Database
Status published
High
CVE-2025-61864
A use after free vulnerability exists in VS6ComFile!load_link_inf of V-SFT...
Vulnerability Description
A use after free vulnerability exists in VS6ComFile!load_link_inf of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-61864
Credits & Attribution
No credits recorded in the NVD database.
References
More from FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd.
View All →CVE-2025-61863
An out-of-bounds read vulnerability exists in VS6ComFile!CSaveData::delete_mem of V-SFT v6.2.7.0...
High
8.4
CVE-2025-61862
An out-of-bounds read vulnerability exists in VS6ComFile!get_ovlp_element_size of V-SFT v6.2.7.0...
High
8.4
CVE-2025-61861
An out-of-bounds read vulnerability exists in VS6ComFile!load_link_inf of V-SFT v6.2.7.0...
High
8.4
CVE-2025-61860
An out-of-bounds read vulnerability exists in VS6MemInIF!set_temp_type_default of V-SFT v6.2.7.0...
High
8.4
CVE-2025-61859
An out-of-bounds write vulnerability exists in VS6ComFile!CItemDraw::is_motion_tween of V-SFT v6.2.7.0...
High
8.4
Affected Vendor
FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd.
View all reports →Affected Software
V-SFT
Vulnerable Versions:
v6.2.7.0 and earlier
Timeline
Official Publish:
October 10th, 2025
Last Modified:
October 10th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H