CVE-2025-50130
- State
- Published
- Severity
- 8.4 High
- Published
- Jul 8, 2025
- Updated
- Jul 8, 2025
- Reserved
- Jun 13, 2025
Description
A heap-based buffer overflow vulnerability exists in VS6Sim.exe contained in V-SFT and TELLUS provided by FUJI ELECTRIC CO., LTD. Opening V9 files or X1 files specially crafted by an attacker on the affected product may lead to arbitrary code execution.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.4 High | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | jpcert |
| 3.1 | 7.8 High | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | jpcert |
Weaknesses
- CWE-122 Heap-based buffer overflow
Affected Products
| Product | Versions |
|---|---|
V-SFT-6FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. |
|
TELLUSFUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.