Remote Code Execution Vulnerability in IrfanView CADImage Plugin

CVE-2025-7246

What is CVE-2025-7246?

The IrfanView CADImage Plugin is susceptible to a specific vulnerability during the parsing of DWG files. This flaw arises from inadequate validation of user-supplied data, leading to memory corruption. Successful exploitation requires user interaction; an attacker must entice the user to open a malicious file or visit a compromised webpage. This breach enables the attacker to execute arbitrary code within the context of the affected process, posing significant security risks to users.

References