CVE-2026-107899 in V-SFT
Summary
by MITRE • 10/26/2026
V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6EditData!CDataRomErrorCheck::CheckSymbolMacroParam. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Analysis
by VulDB Data Team • 10/26/2026
The software component provided by FUJI ELECTRIC CO., LTD., specifically within the V-SFT suite, contains a critical memory safety flaw located in the function CDataRomErrorCheck::CheckSymbolMacroParam of the VS6EditData module. This vulnerability is classified as an out-of-bounds read, which corresponds to CWE-125 in the Common Weakness Enumeration taxonomy. The root cause lies in insufficient boundary checking when processing input data derived from V7 files. When the application parses these specific file formats, it fails to validate that memory access operations remain within the allocated buffer limits, allowing reads beyond the intended memory boundaries.
The operational impact of this vulnerability is severe due to its potential for exploitation through maliciously crafted inputs. An attacker can construct a specially designed V7 file containing malformed data structures or pointers that trigger the out-of-bounds read condition when opened by the vulnerable software. This improper access allows the application to leak sensitive information from adjacent memory regions, potentially exposing internal state variables, cryptographic keys, or other confidential data stored in memory. Furthermore, depending on the specific architecture and compiler optimizations, this memory disclosure can serve as a precursor to more critical attacks. By carefully controlling the input, an attacker may manipulate program flow control or overwrite critical pointers, leading to arbitrary code execution with the privileges of the user running the application.
This type of vulnerability aligns with ATT&CK technique T1083, which covers File and Directory Discovery, as well as techniques related to memory corruption such as those found in T1203 Exploitation for Client Execution if the file is opened by a victim. The lack of proper input validation on complex binary or structured text formats like V7 files highlights a common weakness in industrial control system software where legacy code may not adhere to modern secure coding standards regarding memory management.
Mitigation strategies should focus on immediate patching and defensive programming practices. Users must apply the latest security updates provided by FUJI ELECTRIC CO., LTD. as soon as they become available, ensuring that the boundary checks within CheckSymbolMacroParam are correctly implemented. In the interim, organizations should restrict access to V-SFT installations to trusted personnel only and implement strict input validation policies for any files processed by the system. Network segmentation can also help limit the blast radius if an endpoint is compromised, preventing lateral movement from a workstation running vulnerable software to critical industrial control networks. Regular security audits focusing on memory safety issues in C++ applications are recommended to identify similar flaws before they can be exploited.