Remote Code Execution Vulnerability in IrfanView CADImage Plugin for DWG Files

CVE-2025-7262

What is CVE-2025-7262?

The IrfanView CADImage Plugin contains a vulnerability in its handling of DWG file parsing that could allow remote attackers to execute arbitrary code. This flaw arises from inadequate validation of user-supplied data, leading to potential reads beyond allocated buffers. To exploit this vulnerability, an attacker must trick a user into visiting a malicious webpage or opening a compromised file. When successfully exploited, the attacker can execute code within the context of the user’s current session, posing significant risks to system security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References