Out-of-Bounds Write Vulnerability in FastStone Image Viewer
CVE-2026-101202

5.3MEDIUM

Key Information:

Vendor

Faststone

Status
Image Viewer
Vendor
CVE Published:
28 September 2026

What is CVE-2026-101202?

A security flaw has been identified in FastStone Image Viewer versions up to 8.3, specifically within the TGA Image Handler component. This vulnerability enables attackers to manipulate inputs, leading to an out-of-bounds write condition. Such exploitation can potentially allow for remote code execution, offering an avenue for attackers to compromise systems. Despite the early disclosure of this vulnerability to the vendor, no response has been received, emphasizing the urgent need for users to be aware of this risk and implement necessary mitigations.

Affected Version(s)

Image Viewer 8.0

Image Viewer 8.1

Image Viewer 8.2

References

https://vuldb.com/vuln/411011
vdb-entry
https://vuldb.com/vuln/411011/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-101202
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

jonzab (VulDB User)
VulDB CNA Team
.