Remote Code Execution Vulnerability in IrfanView CADImage Plugin for DWG Files

CVE-2025-7262

What is CVE-2025-7262?

The IrfanView CADImage Plugin contains a vulnerability in its handling of DWG file parsing that could allow remote attackers to execute arbitrary code. This flaw arises from inadequate validation of user-supplied data, leading to potential reads beyond allocated buffers. To exploit this vulnerability, an attacker must trick a user into visiting a malicious webpage or opening a compromised file. When successfully exploited, the attacker can execute code within the context of the user’s current session, posing significant risks to system security.

References