Memory Corruption in IrfanView CADImage Plugin Allows Remote Code Execution

CVE-2025-7294

What is CVE-2025-7294?

A vulnerability in the IrfanView CADImage Plugin allows remote code execution due to improper validation of user-supplied data when parsing DXF files. This flaw can lead to a memory corruption condition, enabling attackers to execute arbitrary code in the context of the current process. User interaction is required, as exploitation necessitates the target to access a malicious page or open a compromised DXF file. Awareness and mitigation of this vulnerability are crucial for maintaining system security.

References