Skip to content
OpenAdvisories
High · 7.8 CVE-2022-43448 EUVD-2022-46450GHSA-6368-qr9w-9m58

Out-of-bounds write vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the info…

Published Jan 3, 2023 · Updated Apr 10, 2025 · Assigned by jpcert

Vendor: FUJI ELECTRIC CO., LTD. and Hakko Electronics Product: V-SFT and TELLUS

Description

Out-of-bounds write vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted image file.

Affected products

VendorProductAffectedFixed
FUJI ELECTRIC CO., LTD. and Hakko Electronics V-SFT and TELLUS V-SFT v6.1.7.0 and earlier, and TELLUS v4.0.12.0 and earlier —

References