CVE-2025-47754

Name of the Vulnerable Software and Affected Versions: V-SFT versions 6.2.5.0 and earlier

Description: The issue is related to an out-of-bounds read in the Conv Macro Data function. Opening specially crafted V7 or V8 files may lead to a crash, information disclosure, and arbitrary code execution.

Recommendations: For V-SFT versions 6.2.5.0 and earlier, consider disabling the Conv Macro Data function until a patch is available to prevent potential code execution. Avoid opening specially crafted V7 or V8 files with affected versions of V-SFT to minimize the risk of exploitation.