Fuji Electric vulnerabilities and threats

V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6ComFile!CCheck::ItemCheck. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product.

V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6EditData!CDataRomErrorCheck::CheckSymbolMacroParam. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product.

V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6EditData!CDataRomErrorCheck::MacroCommandCheck. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product.

V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6MemInIF!set_temp_type_default. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product.

V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6ComFile!load_gr_item. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product.

V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds write vulnerability. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product.

V-SFT provided by FUJI ELECTRIC CO., LTD. contains a stack-based buffer overflow vulnerability. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product.

Incorrect default permissions issue exists in Pupsman versions prior to 3.9.0. An attacker can place a malicious executable in the installation folder, which results in arbitrary code execution with SYSTEM privilege

Uncontrolled search path element issue exists in Pupsman versions prior to 3.9.0. If a crafted DLL file is placed in the same folder as the affected installer and the installer is executed, arbitrary code may be executed with SYSTEM privilege.

CVE-2026-8108 is a high-severity vulnerability in Fuji Electric Tellus version 5.0.2 where the installation adds a kernel driver that grants all users read and write permissions. This misconfiguration can lead to unauthorized access and modification of kernel-level resources.

An out-of-bounds read vulnerability exists in FUJI ELECTRIC CO. , LTD. / Hakko Electronics Co. , Ltd. V-SFT versions 6.2.10.0 and prior. The flaw occurs in the VS6ComFile component's get_macro_mem_COM function. Opening a specially crafted V7 file may cause information disclosure from the affected product.

A stack-based buffer overflow vulnerability exists in FUJI ELECTRIC CO. , LTD. / Hakko Electronics Co. , Ltd. V-SFT versions 6.2.10.0 and prior. The flaw is located in the VS6ComFile! CSaveData::_conv_AnimationItem function.

An out-of-bounds read vulnerability exists in FUJI ELECTRIC CO. , LTD. / Hakko Electronics Co. , Ltd. V-SFT versions 6.2.10.0 and earlier. The flaw occurs in the function VS6MemInIF! set_temp_type_default and can be triggered by opening a specially crafted V7 file.

V-SFT versions 6.2.10.0 and earlier contain an out-of-bounds read vulnerability in the VS6ComFile! load_link_inf function. This vulnerability can be triggered by opening a specially crafted V7 file, potentially leading to information disclosure. The vulnerability has a high severity rating with a CVSS score of 7.8. There is no information provided about an available patch or vendor advisory. The product is not a cloud service, and no known exploits are reported in the wild.

V-SFT versions 6.2.10.0 and earlier contain a stack-based buffer overflow vulnerability in the VS6ComFile! CV7BaseMap::WriteV7DataToRom function. This flaw can be triggered by opening a specially crafted V7 file, potentially allowing an attacker to execute arbitrary code on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. No official patch or vendor advisory information is provided at this time, and there are no known exploits in the wild.

Fuji Electric Monitouch V-SFT-6 is vulnerable to an out-of-bounds write while processing a specially crafted project file, which may allow an attacker to execute arbitrary code.

Fuji Electric Monitouch V-SFT-6 is vulnerable to a stack-based buffer overflow while processing a specially crafted project file, which may allow an attacker to execute arbitrary code.

A maliciously crafted project file may cause a heap-based buffer overflow in Fuji Electric Monitouch V-SFT-6, which may allow the attacker to execute arbitrary code.

A use after free vulnerability exists in VS6ComFile!load_link_inf of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.

An out-of-bounds read vulnerability exists in VS6ComFile!CSaveData::delete_mem of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.