CVE-2025-47754: Critical Out-Of-Bounds Read Vulnerability in V-SFT

Overview

CVE-2025-47754 is a critical security vulnerability affecting V-SFT v6.2.5.0 and earlier versions. The vulnerability resides in the VS6EditData!Conv_Macro_Data function. It is a severe out-of-bounds read vulnerability that can be exploited if a user opens specially crafted V7 or V8 files. The exploit may lead to system crashes, unauthorized information disclosure, and arbitrary code execution. In the worst-case scenario, this could potentially compromise an entire system or lead to significant data leakage.
This vulnerability is particularly alarming due to its potential impact on users and systems utilizing V-SFT. As a widely used software in industrial automation, any compromise or data leakage could lead to significant operational disruptions and financial losses. The vulnerability’s severity is underlined by its CVSS Severity Score of 7.8, indicating its high-risk nature.

Vulnerability Summary

CVE ID: CVE-2025-47754
Severity: High (CVSS: 7.8)
Attack Vector: Local
Privileges Required: Low
User Interaction: Required
Impact: System crash, information disclosure, and arbitrary code execution

Affected Products

Product | Affected Versions

V-SFT | v6.2.5.0 and earlier

How the Exploit Works

The exploit takes advantage of an out-of-bounds read vulnerability in the VS6EditData!Conv_Macro_Data function of V-SFT. This vulnerability is triggered when a user opens a maliciously crafted V7 or V8 file. The file contains specially crafted data that, when parsed by the vulnerable function, causes the software to read beyond the allocated memory. This can lead to a system crash, information disclosure, and potentially arbitrary code execution if the attacker has carefully controlled the data in the file to manipulate memory in a way that allows them to execute code.

Conceptual Example Code

This is a conceptual example of how the vulnerability might be exploited. An attacker could craft a V7 or V8 file with malicious data embedded within. When this file is opened in V-SFT, it would trigger the vulnerability:

$ echo "malicious_data" > crafted.v7

In this example, the “malicious_data” would be specifically designed to exploit the out-of-bounds read vulnerability in the VS6EditData!Conv_Macro_Data function. When the user opens this file in the vulnerable V-SFT software, it would lead to a system crash, information disclosure, or arbitrary code execution.
While this is a simplified example, an actual exploit would likely involve more complex data manipulation and careful crafting of the malicious file.