Memory Corruption in IrfanView CADImage Plugin Allows Remote Code Execution

CVE-2025-7304

What is CVE-2025-7304?

The IrfanView CADImage Plugin is susceptible to a memory corruption vulnerability during the parsing of DWG files. This flaw stems from inadequate validation of user-supplied input, allowing remote attackers to exploit this issue by enticing users to visit a malicious webpage or open a compromised file. When successfully executed, the attacker's code runs within the context of the affected process, leading to potential system compromise.

References