An out-of-bounds read vulnerability exists in FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd.'s V-SFT software, specifically in the VS6ComFile!load_link_inf function. Versions 6.2.10.0 and prior are affected. When a crafted V7 file is opened, the vulnerability may cause the software to read memory outside the intended bounds, potentially disclosing sensitive information. The vulnerability is rated high severity with a CVSS 3.1 score of 7.8, indicating significant confidentiality, integrity, and availability impacts. No patch or official remediation information is provided in the available data.

Successful exploitation of this vulnerability can lead to information disclosure due to out-of-bounds memory reads. The CVSS vector indicates local attack vector with low complexity, no privileges required, user interaction needed, and high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, avoid opening untrusted or suspicious V7 files in affected versions of V-SFT.