Out-Of-Bounds Write Vulnerability in IrfanView CADImage Plugin

CVE-2025-7258

What is CVE-2025-7258?

The IrfanView CADImage Plugin suffers from an Out-Of-Bounds Write vulnerability during the parsing of DWG files. This flaw arises due to improper validation of user-supplied data, leading to the possibility of writing past the limits of an allocated buffer. Attackers can exploit this vulnerability by enticing users to visit a malicious page or open a compromised file, resulting in the execution of arbitrary code within the affected installation. This security issue poses significant risks, as it allows unauthorized access to the system in the context of the current process.

References