Memory Corruption Vulnerability in IrfanView CADImage Plugin

CVE-2025-7314

What is CVE-2025-7314?

A memory corruption vulnerability exists in the IrfanView CADImage Plugin due to improper validation of user-supplied DWG files. This flaw allows remote attackers to potentially execute arbitrary code on affected installations by enticing users to visit malicious websites or open compromised files. By exploiting this vulnerability, an attacker could gain control over the affected process, leading to unauthorized actions on the system.

References