Out-Of-Bounds Read Vulnerability in IrfanView CADImage Plugin

CVE-2025-7268

What is CVE-2025-7268?

A remote code execution vulnerability exists within the IrfanView CADImage Plugin due to improper validation of user-supplied data while parsing DXF files. This flaw enables attackers to exploit malicious DXF files, potentially leading to arbitrary code execution in the context of the current process. Successful exploitation necessitates user interaction, such as opening a compromised file or visiting a malicious page. Users are urged to update their installations to mitigate this risk.

References