CVE Feed

    Dashboard / CVE / CVE-2022-26302

    CVE-2022-26302

    Heap-based buffer overflow exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file.

    Published:Jun 14, 2022
    Last Modified:Nov 21, 2024
    EPS:Jun 14, 2022
    EPSS Score:0.00851
    CVSS Score:7.8

    Affected Products

    Vendor
    Fujielectric
    Product
    V-sft

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-787 Out-of-bounds Write

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-32929 (CVSS 8.4) — V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read in VS6ComFile!get_macro_mem_COM. Opening a cra…
    CVE-2026-32928 (CVSS 8.4) — V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CSaveData::_conv_Animati…
    CVE-2026-32927 (CVSS 8.4) — V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6MemInIF!set_temp_type_defa…
    CVE-2026-32926 (CVSS 8.4) — V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6ComFile!load_link_inf. Ope…
    CVE-2026-32925 (CVSS 8.4) — V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CV7BaseMap::WriteV7DataT…
    CVE-2025-61864 (CVSS 8.4) — A use after free vulnerability exists in VS6ComFile!load_link_inf of V-SFT v6.2.7.0 and earlier. Opening speci…
    CVE-2025-61863 (CVSS 8.4) — An out-of-bounds read vulnerability exists in VS6ComFile!CSaveData::delete_mem of V-SFT v6.2.7.0 and earlier. …
    CVE-2025-61862 (CVSS 8.4) — An out-of-bounds read vulnerability exists in VS6ComFile!get_ovlp_element_size of V-SFT v6.2.7.0 and earlier. …
    CVE-2025-61861 (CVSS 8.4) — An out-of-bounds read vulnerability exists in VS6ComFile!load_link_inf of V-SFT v6.2.7.0 and earlier. Opening …
    CVE-2025-61860 (CVSS 8.4) — An out-of-bounds read vulnerability exists in VS6MemInIF!set_temp_type_default of V-SFT v6.2.7.0 and earlier. …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High