CVE-2026-32928 HIGH

CVE-2026-32928

Vendor Fuji Electric Co., Ltd. / Hakko Electronics Co., Ltd.
Product V-SFT
Weakness CWE-121
Published April 1, 2026
Last update April 2, 2026
View on NVD All CVEs

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CSaveData::_conv_AnimationItem. Opening a crafted V7 file may lead to arbitrary code execution on the affected product.

Key dates

02Disclosure timeline

April 1, 2026 CVE published
April 2, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2018-1161 CVE-2025-26507 Certain HP LaserJet Pro, HP LaserJet Enterprise, HP LaserJet Managed Printers – Potential Remote Code Execution and Potential Elevation of Privilege CVE-2025-5863 Tenda AC5 SetRebootTimer formSetRebootTimer stack-based overflow CVE-2024-2808 Tenda AC15 QuickIndex formQuickIndex stack-based overflow CVE-2021-1197 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities