CVE-2025-50130

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-07-08 · updated 2026-06-17
Weakness: CWE-122

Description

A heap-based buffer overflow vulnerability exists in VS6Sim.exe contained in V-SFT and TELLUS provided by FUJI ELECTRIC CO., LTD. Opening V9 files or X1 files specially crafted by an attacker on the affected product may lead to arbitrary code execution.

Affected products

FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd. TELLUS: through v4.0.20.0
FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. V-SFT-6: through v6.2.5.0

References

https://jvn.jp/en/vu/JVNVU94011267/
https://monitouch.fujielectric.com/site/download-e/03tellus_inf/Search.php
https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php

Get alerted when CVE-2025-50130 or the next vulnerability affects your stack