Memory Corruption Vulnerability in IrfanView CADImage Plugin

CVE-2025-7255

What is CVE-2025-7255?

The IrfanView CADImage Plugin is vulnerable to a memory corruption flaw that affects the parsing of DWG files. This vulnerability can be exploited by remote attackers to execute arbitrary code by leveraging user-supplied data that is poorly validated. Specifically, users may inadvertently trigger this flaw by opening a malicious DWG file or visiting a compromised webpage containing such a file. Successful exploitation allows an attacker to execute code within the context of the affected process, posing significant risks to the system's integrity and security.

References