Remote Code Execution Risk in IrfanView CADImage Plugin for DXF File Parsing

CVE-2025-7291

What is CVE-2025-7291?

This vulnerability involves a flaw in the IrfanView CADImage Plugin's ability to properly parse DXF files. Due to insufficient validation of user-supplied data, an attacker can exploit this weakness to read beyond the allocated memory buffer. As a result, they may execute arbitrary code on the affected system, provided that a user either visits a malicious web page or opens a specially crafted file, thus triggering the vulnerability. This issue underscores the importance of code validation and user awareness in maintaining cybersecurity.

References