Memory Corruption Vulnerability in IrfanView CADImage Plugin

CVE-2025-7310

What is CVE-2025-7310?

This vulnerability in the IrfanView CADImage Plugin arises from improper validation during the parsing of DWG files. Attackers can exploit this flaw to cause memory corruption, allowing them to execute arbitrary code on affected systems. Successful exploitation requires user interaction, as victims must either navigate to a malicious webpage or open a specially crafted DWG file. This exposure poses a significant risk, enabling unauthorized control over the affected installations.

References