Memory Corruption in IrfanView CADImage Plugin Due to DWG File Parsing

CVE-2025-7280

What is CVE-2025-7280?

The vulnerability in the IrfanView CADImage Plugin arises during the parsing of DWG files due to inadequate validation of user-supplied data. This flaw can result in a memory corruption condition that may allow remote attackers to execute arbitrary code on affected installations. Exploitation requires user interaction, as the vulnerable code is triggered when a user visits a malicious webpage or opens a compromised file, enabling attackers to gain unwarranted access to the affected process.

References