CVE-2025-47749
19.05.2025, 08:15
V-SFT v6.2.5.0 and earlier contains an issue with free of pointer not at start of buffer in VS6EditData.dll!CWinFontInf::WinFontMsgCheck function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution.Enginsight
| Vendor | Product | Version |
|---|---|---|
| fujielectric | monitouch_v-sft | 6.0.1.0 ≤ 𝑥 < 6.2.6.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-761 - Free of Pointer not at Start of BufferThe application calls free() on a pointer to a memory resource that was allocated on the heap, but the pointer is not at the start of the buffer.
- CWE-763 - Release of Invalid Pointer or ReferenceThe application attempts to return a memory resource to the system, but calls the wrong release function or calls the appropriate release function incorrectly.