CVE-2025-54496CWE-122

CVE-2025-54496

High · published November 5, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
8.3
In the wild
Unconfirmed
What it is

⚡ A malicious project file could unleash chaos in Fuji Electric Monitouch V-SFT-6, leading to a heap-based buffer overflow! 🔥 Think of it like a restaurant that serves food on a tray that’s just too small – if you keep piling on the dishes, everything spills over, causing a huge mess. In this case, some crafty code is packing too much into the memory, leading to disastrous consequences. An attacker could exploit this buffer overflow to execute arbitrary code, potentially taking control of the device entirely. This means sensitive functions could be manipulated, putting critical systems at risk. The impact could range from service disruption to complete system takeover, making it a serious threat!

Put simply

Think of it like a restaurant that serves food on a tray that’s just too small – if you keep piling on the dishes, everything spills over, causing a huge mess. In this case, some crafty code is packing too much into the memory, leading to disastrous consequences. CVE-2025-54496 is a heap-based buffer overflow vulnerability in Fuji Electric Monitouch V-SFT-6 triggered by maliciously crafted project files, allowing attackers to execute arbitrary code.

What to do

An attacker could exploit this buffer overflow to execute arbitrary code, potentially taking control of the device entirely. This means sensitive functions could be manipulated, putting critical systems at risk. The impact could range from service disruption to complete system takeover, making it a serious threat! Update the Fuji Electric Monitouch V-SFT-6 software to the latest version as soon as it's available. Ensure that project files are validated and scanned for malicious content before being opened. Implement strict access controls to limit exposure to untrusted files. You've got this! Follow these steps, and you'll keep your systems secure and your hero status intact! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00191 · 8.3th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2025-11-05T03:16Z
Affected products (1)
ProductVersionsFixed in
fujielectric/monitouch_v-sft≥ 6.2.7.0, < 6.2.9.06.2.9.0
References (3)
EPSS history
Timeline
  • 04 NOV 21:36Z
    Fuji Electric Monitouch V-SFT-6 Heap-based Buffer Overflow
    cvelistv5