CVE-2025-53524CWE-787

Fuji Electric Monitouch V-SFT-6 Out-of-bounds Write

High · published December 17, 2025

CVSS v4.0
8.4
EPSS
0%
Percentile
17.0
In the wild
Unconfirmed
What it is

⚡ An out-of-bounds write in Fuji Electric Monitouch V-SFT-6 could let attackers execute arbitrary code! Imagine your smart home devices suddenly acting on their own—yikes! 🔥 Think of this vulnerability like a delivery service that accidentally misplaces something important in the wrong part of the warehouse—once the wrong item is in the wrong place, it can lead to all sorts of chaos. This flaw allows attackers to craft a project file that misdirects the execution flow, resulting in potential malicious code running unchecked. If exploited, an attacker could gain unauthorized control over the system, potentially leading to data theft, unauthorized actions, or even disruption of services. The consequences could be absolutely devastating, especially in critical environments where Monitouch systems operate.

Put simply

Think of this vulnerability like a delivery service that accidentally misplaces something important in the wrong part of the warehouse—once the wrong item is in the wrong place, it can lead to all sorts of chaos. This flaw allows attackers to craft a project file that misdirects the execution flow, resulting in potential malicious code running unchecked. CVE-2025-53524 describes an out-of-bounds write vulnerability in Monitouch V-SFT-6, allowing attackers to manipulate the execution of code through specially crafted project files, bypassing normal safety checks and controls.

What to do

If exploited, an attacker could gain unauthorized control over the system, potentially leading to data theft, unauthorized actions, or even disruption of services. The consequences could be absolutely devastating, especially in critical environments where Monitouch systems operate. To mitigate this risk, immediately patch the affected systems with the latest version provided by Fuji Electric. Additionally, review project files for any untrusted input and ensure proper validation and sanitization is performed before processing them. You've got this! With these steps, you'll bolster your defenses and keep your systems secure. 🛡️

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00262 · 17.0th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-12-17T00:19Z
EPSS history
Timeline
  • 17 DEC 00:19Z
    Fuji Electric Monitouch V-SFT-6 Out-of-bounds Write
    cvelistv5