Memory Corruption Vulnerability in IrfanView CADImage Plugin for DXF File Parsing

CVE-2025-7288

What is CVE-2025-7288?

The vulnerability in the IrfanView CADImage Plugin arises from improper validation during the parsing of DXF files. This oversight allows attackers to craft malicious DXF files that, when opened, can lead to memory corruption. An attacker can exploit this by tricking users into interacting with these malicious files, enabling arbitrary code execution within the context of the application. This poses a significant risk, as it could compromise system integrity and lead to unauthorized access.

References