CVE-2022-29506: Fujielectric V-Server

High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Out-of-bounds read vulnerability exist in the simulator module contained in the graphic editor 'V-SFT' v6.1.3.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file.

Affected products

  • Fujielectric V-Server: before 4.0.12.0 (fixed in 4.0.12.0); before 4.0.13.0a (fixed in 4.0.13.0a)
  • Fujielectric V-Sft: before 6.1.6.0 (fixed in 6.1.6.0)

Published 2022-06-14. Last modified 2026-06-17.