Memory Corruption Vulnerability in IrfanView CADImage Plugin

CVE-2025-7297

What is CVE-2025-7297?

The IrfanView CADImage Plugin is susceptible to a memory corruption vulnerability due to inadequate validation when parsing DWG files. This flaw enables remote attackers to execute arbitrary code if a user interacts with a malicious page or opens a compromised file. By exploiting this vulnerability, attackers can potentially gain control over the application and execute unintended commands within the context of the affected process.

References