Remote Code Execution Vulnerability in IrfanView CADImage Plugin

CVE-2025-7260

What is CVE-2025-7260?

The IrfanView CADImage Plugin has a notable vulnerability that occurs during the parsing of DXF files. Attackers can exploit this issue due to insufficient validation of user-supplied data, leading to the possibility of writing beyond the allocated buffer. This can allow remote attackers to execute arbitrary code if a user is tricked into visiting a malicious webpage or opening a compromised file. Proper mitigation measures should be taken to ensure systems are protected against such threats.

References