IrfanView CADImage Plugin Vulnerability in DXF File Parsing

CVE-2025-7273

What is CVE-2025-7273?

The vulnerability within the IrfanView CADImage Plugin arises from improper validation during the parsing of DXF files, which allows remote attackers to perform an out-of-bounds read. When a user interacts with a malicious webpage or opens a crafted DXF file, the lack of sufficient data validation leads to potential code execution in the context of the current process. It is crucial for users to apply necessary patches to mitigate this risk and secure their applications.

References