Memory Corruption in IrfanView CADImage Plugin Due to Improper DXF File Parsing

CVE-2025-7278

What is CVE-2025-7278?

The IrfanView CADImage Plugin is susceptible to a memory corruption vulnerability due to inadequate validation of user-supplied data when parsing DXF files. This flaw allows remote attackers to execute arbitrary code on affected systems, contingent upon user interaction with a malicious page or file. Attackers can exploit this vulnerability to execute code in the context of the current process, potentially leading to unauthorized actions on the victim's system. Ensure your software is up to date to mitigate the risk associated with this vulnerability.

References