Memory Corruption Vulnerability in IrfanView CADImage Plugin

CVE-2025-7309

What is CVE-2025-7309?

The IrfanView CADImage Plugin contains a vulnerability that stems from inadequate validation of user-supplied data during DWG file parsing. This flaw can lead to a memory corruption condition, allowing remote attackers to execute arbitrary code on compromised installations. To exploit this vulnerability, a user must interact with a malicious web page or open a harmful file. Safeguarding against this risk involves updating the plugin to the latest version as well as employing security best practices to minimize exposure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References