Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2022-29925: Access of uninitialized pointer vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information an...
CVE-2022-29925 · published 4 years ago
Summary
Access of uninitialized pointer vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file.
What to do
- Update fujielectric v-sft to version 6.1.6.0 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| fujielectric | v-sft |
< 6.1.6.0 cpe:2.3:a:fujielectric:v-sft:*:*:*:*:*:*:*:* |
Original advisory text
Access of uninitialized pointer vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information an...
Access of uninitialized pointer vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file.
References
- https://jvn.jp/en/vu/JVNVU99188133/index.html Third Party Advisory
- https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Type
CWE-824Access of Uninitialized Pointer
Timeline
Published14 Jun 2022
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2022-29925 · NVD
Track software like this
Free during beta