Fujielectric: Security Vulnerabilities
Use after free vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file.
CVSS Score
7.8
EPSS Score
0.005
Published
2022-06-14
Out-of-bounds write vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file.
CVSS Score
7.8
EPSS Score
0.004
Published
2022-06-14
Access of uninitialized pointer vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file.
CVSS Score
7.8
EPSS Score
0.004
Published
2022-06-14
The affected product is vulnerable due to an invalid pointer initialization, which may lead to information disclosure.
CVSS Score
3.3
EPSS Score
0.002
Published
2022-04-12
The affected product is vulnerable to an out-of-bounds read, which may result in disclosure of sensitive information.
CVSS Score
3.3
EPSS Score
0.002
Published
2022-04-12
The affected product is vulnerable to a heap-based buffer overflow, which may lead to code execution.
CVSS Score
7.8
EPSS Score
0.005
Published
2022-04-12
The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code.
CVSS Score
7.8
EPSS Score
0.005
Published
2022-04-12
The affected product is vulnerable to an out-of-bounds read, which may result in code execution
CVSS Score
7.8
EPSS Score
0.003
Published
2022-04-12
Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an untrusted pointer dereference, which may allow an attacker to execute arbitrary code and cause the application to crash.
CVSS Score
7.8
EPSS Score
0.002
Published
2021-12-20
Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an access of uninitialized pointer, which may allow an attacker read from or write to unexpected memory locations, leading to a denial-of-service.
CVSS Score
7.8
EPSS Score
0.001
Published
2021-12-20