Out-Of-Bounds Read Vulnerability in IrfanView CADImage Plugin

CVE-2025-7322

What is CVE-2025-7322?

The IrfanView CADImage Plugin is vulnerable due to improper handling of DWG file parsing, which allows an attacker to exploit the flaw for remote code execution. Specifically, the vulnerability arises from inadequate validation of user-supplied data, enabling an out-of-bounds read beyond the allocated buffer. The exploitation of this vulnerability typically requires user interaction, as the victim must visit a malicious webpage or open a compromised DWG file, potentially leading to unauthorized code execution in the context of the current process.

References