Out-of-Bounds Read Vulnerability in FastStone Image Viewer by FastStone
CVE-2026-116463

5.3MEDIUM

Key Information:

Vendor

Faststone

Status
Image Viewer
Vendor
CVE Published:
26 October 2026

What is CVE-2026-116463?

A security vulnerability exists in FastStone Image Viewer versions up to 8.5, specifically in the Box-Average Downsampler Engine's function FUN_0062d96c. This flaw could allow an attacker to exploit it through remote means, leading to potential unauthorized access to sensitive information. The vendor was notified about the issue, but they did not respond before the vulnerability was publicly disclosed.

Affected Version(s)

Image Viewer 8.0

Image Viewer 8.1

Image Viewer 8.2

References

https://vuldb.com/vuln/426360
vdb-entrytechnical-description
https://vuldb.com/vuln/426360/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-116463
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

jacksonstone (VulDB User)
VulDB CNA Team
.