Memory Corruption in IrfanView CADImage Plugin DXF File Parsing

CVE-2025-7286

What is CVE-2025-7286?

The vulnerability arises from improper validation during the parsing of DXF files in the IrfanView CADImage Plugin. This flaw enables an attacker to craft malicious DXF files that, when opened, could corrupt memory and lead to arbitrary code execution within the context of the user's process. To exploit this security issue, the attacker must manipulate the user into interacting with the crafted files, highlighting the need for heightened security awareness when processing file types from untrusted sources.

References