Vulnerabilities > CVE-2022-26302 - Out-of-bounds Write vulnerability in Fujielectric V-Sft 6.0.0.0/6.1.5.0

047910
CVSS 7.8 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
fujielectric
CWE-787

Summary

Heap-based buffer overflow exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file.

Vulnerable Configurations

Part Description Count
Application
Fujielectric
2

Common Weakness Enumeration (CWE)