Memory Corruption Vulnerability in IrfanView CADImage Plugin for DWG Files

CVE-2025-7318

What is CVE-2025-7318?

The memory corruption vulnerability in the IrfanView CADImage Plugin arises during the parsing of DWG files, where inadequate validation of user-supplied data allows attackers to corrupt memory. This condition can be exploited to execute arbitrary code once the victim visits a malicious webpage or opens a compromised file. It highlights the importance of rigorous data validation to prevent unauthorized access and execution within the software.

References