CVE-2022-29925

Access of uninitialized pointer vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file.

Score

CVSS 3.1 7.8 High

Status

Modified - vultures@jpcert.or.jp

Published

2022-06-14

Last modified

2024-08-03

Weaknesses

CWE-824

Affected products

• V-sft (Fuji Electric Co. Ltd. Hakko Electronics Co. Ltd.)
• V-sft (Fujielectric)

References

• https://jvn.jp/en/vu/JVNVU99188133/index.html
• https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php