IrfanView CADImage Plugin Vulnerability in DWG File Parsing

CVE-2025-7312

What is CVE-2025-7312?

The IrfanView CADImage Plugin has a security vulnerability related to how DWG files are parsed. This issue arises from inadequate validation of data provided by users, leading to potential out-of-bounds reads. An attacker can exploit this flaw if a victim opens a specially crafted file or visits a malicious webpage, ultimately allowing the execution of arbitrary code within the context of the affected application.

References