Memory Corruption Vulnerability in IrfanView's CADImage Plugin

CVE-2025-7313

What is CVE-2025-7313?

The IrfanView CADImage Plugin contains a vulnerability in its DWG file parsing functionality, allowing remote attackers to execute arbitrary code. This flaw arises from inadequate validation of user-supplied data, leading to memory corruption. For exploitation, user interaction is necessary, requiring the target to either visit a malicious webpage or open a compromised file. Once the exploit is successful, attackers can execute code within the context of the affected process, potentially compromising system integrity.

References