Remote Code Execution Risk in IrfanView CADImage Plugin for DXF File Parsing

CVE-2025-7291

What is CVE-2025-7291?

This vulnerability involves a flaw in the IrfanView CADImage Plugin's ability to properly parse DXF files. Due to insufficient validation of user-supplied data, an attacker can exploit this weakness to read beyond the allocated memory buffer. As a result, they may execute arbitrary code on the affected system, provided that a user either visits a malicious web page or opens a specially crafted file, thus triggering the vulnerability. This issue underscores the importance of code validation and user awareness in maintaining cybersecurity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References