Remote Code Execution in IrfanView CADImage Plugin Due to Memory Corruption
CVE-2025-7266

7.8HIGH

Key Information:

Vendor

Irfanview
Status
Irfanview
Vendor
CVE Published:
21 July 2025

What is CVE-2025-7266?

The vulnerability in the IrfanView CADImage Plugin arises from improper handling of DXF file data during parsing. This flaw permits attackers to exploit the parsing process, potentially leading to memory corruption and enabling execution of arbitrary code. Exploitation requires the user to either visit a specially crafted webpage or open a malicious DXF file, posing risks to user systems. Adequate sanitation and validation of inputs are critical to ensuring security against such attacks.

Affected Version(s)

IrfanView 4.70.0.0

References

https://www.zerodayinitiative.com/advisories/ZDI-25-514/
x_research-advisory

CVSS V3.0

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.