A stack-based buffer overflow occurs in the V-SFT application’s VS6ComFile!CV7BaseMap::WriteV7DataToRom function. When an attacker supplies a specially crafted V7 file, the overflow allows arbitrary code to run, compromising the integrity and confidentiality of the affected system. The flaw is catalogued as CWE-121.

The vulnerability targets Fujielectric Co., Ltd. and Hakko Electronics Co., Ltd. V‑SFT products running version 6.2.10.0 or earlier. No patched versions are mentioned, so any installation of those or newer earlier releases may be affected.

With a CVSS score of 8.4, the vulnerability is rated high severity, while an EPSS score below 1% indicates exploitation is currently uncommon. The lack of a KEV listing suggests no widespread attacks have been reported. The likely attack vector requires an attacker to supply or persuade a user to open a malicious V7 file, so the threat is local or user-facing but could lead to remote code execution if the system processes the file.