Security Advisory

CVE-2025-61859

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-10-10 10:33:18
Last updated 2025-10-10 15:46:50
Assigner jpcert
State PUBLISHED

Description

An out-of-bounds write vulnerability exists in VS6ComFile!CItemDraw::is_motion_tween of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected systems abnormal end (ABEND), and arbitrary code execution.