Vulnerabilities > CVE-2022-29925 - Access of Uninitialized Pointer vulnerability in Fujielectric V-Sft 6.0.0.0/6.1.5.0

047910
CVSS 7.8 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
fujielectric
CWE-824

Summary

Access of uninitialized pointer vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file.

Vulnerable Configurations

Part Description Count
Application
Fujielectric
3

Common Weakness Enumeration (CWE)