Memory Corruption Vulnerability in IrfanView CADImage Plugin

CVE-2025-7281

What is CVE-2025-7281?

The IrfanView CADImage Plugin contains a memory corruption vulnerability during the parsing of DWG files. This flaw arises from inadequate validation of user-supplied input, allowing attackers to manipulate the affected installation. By exploiting this issue, a remote attacker can execute arbitrary code in the context of the vulnerable process by tricking the user into visiting a malicious page or opening a specially crafted malicious file. Organizations using IrfanView are advised to implement the latest security patches to mitigate this risk.

References