Skip to content
OpenAdvisories
High · 7.8 CVE-2024-38309 EUVD-2024-37715GHSA-w9mq-3f7x-p532

There are multiple stack-based buffer overflow vulnerabilities in V-SFT (v6.2.2.0 and earlier), TELLUS (v4.0.19.0 and earlier), and TELLUS …

Published Nov 28, 2024 · Updated Nov 29, 2024 · Assigned by jpcert

Description

There are multiple stack-based buffer overflow vulnerabilities in V-SFT (v6.2.2.0 and earlier), TELLUS (v4.0.19.0 and earlier), and TELLUS Lite (v4.0.19.0 and earlier).
If a user opens a specially crafted file, information may be disclosed and/or arbitrary code may be executed.

Affected products

VendorProductAffectedFixed
FUJI ELECTRIC CO., LTD. and Hakko Electronics V-SFT v6.2.2.0 and earlier —
FUJI ELECTRIC CO., LTD. and Hakko Electronics TELLUS v4.0.19.0 and earlier —
FUJI ELECTRIC CO., LTD. and Hakko Electronics TELLUS Lite v4.0.19.0 and earlier —

References