Out-Of-Bounds Read Vulnerability in IrfanView CADImage Plugin

CVE-2025-7322

What is CVE-2025-7322?

The IrfanView CADImage Plugin is vulnerable due to improper handling of DWG file parsing, which allows an attacker to exploit the flaw for remote code execution. Specifically, the vulnerability arises from inadequate validation of user-supplied data, enabling an out-of-bounds read beyond the allocated buffer. The exploitation of this vulnerability typically requires user interaction, as the victim must visit a malicious webpage or open a compromised DWG file, potentially leading to unauthorized code execution in the context of the current process.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References