CVE-2025-50130

8.4 highEPSS 0.2%

High (8.4). EPSS 0.2% chance of exploitation in the next 30 days.

A heap-based buffer overflow vulnerability exists in VS6Sim.exe contained in V-SFT and TELLUS provided by FUJI ELECTRIC CO., LTD. Opening V9 files or X1 files specially crafted by an attacker on the affected product may lead to arbitrary code execution.

Severity

CVSS 4.0

8.4 high

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-31)
CWE: CWE-122
Published: 2025-07-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://jvn.jp/en/vu/JVNVU94011267/
https://monitouch.fujielectric.com/site/download-e/03tellus_inf/Search.php
https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php

Check your stack JSON