← Vulnerability feed

Vulnerability record · CVE-2025-58777 · published 2 October 2025

CVE-2025-58777: Keyence vt studio vulnerability

Keyence · Vt Studio

VT Studio versions 8.53 and prior contain an access of uninitialized pointer vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product.

7.1 CVSS 4.0 High EPSS 0.14% · top 97.3% CWE-824 · CWE-824
7.1CVSS 4.0 base score
0.14%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

VT Studio versions 8.53 and prior contain an access of uninitialized pointer vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product.

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://jvn.jp/en/vu/JVNVU97069449/ Third Party Advisory
https://www.keyence.com/vt_vulnerability250930 MitigationVendor Advisory

Track CVE-2025-58777 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2024-28099Keyence vt studio uncontrolled search path element vulnerabilityVT STUDIO Ver.8.32 and earlier contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, …EPSS 0.19%7.1CVE-2025-61692Keyence vt studio use after free vulnerabilityVT STUDIO versions 8.53 and prior contain a use after free vulnerability. If the product uses a specially crafted file, arbitrary code may be execute…EPSS 0.14%7.1CVE-2025-61691Keyence vt studio out-of-bounds read vulnerabilityVT STUDIO versions 8.53 and prior contain an out-of-bounds read vulnerability. If the product uses a specially crafted file, arbitrary code may be ex…EPSS 0.14%7.8CVE-2022-21971Windows Runtime use-after-free leads to remote code executionCVE-2022-21971 is a remote code execution flaw in the Windows Runtime component of supported Windows 10, Windows 11 and Windows Server builds. The CV…KEVEPSS 54%analysed8.8CVE-2015-1770Microsoft Office uninitialized memory use allows remote code executionMicrosoft Office 2013 SP1 and 2013 RT SP1 mishandle uninitialized memory when parsing a crafted Office document, which can lead to arbitrary code exe…KEVEPSS 35%analysed

Source: NIST National Vulnerability Database (record CVE-2025-58777), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.