Vulnerabilities in IrfanView

184 results
Vexday analysis

O IrfanView acumula 183 CVEs catalogadas, volume considerável para um visualizador de imagens, com CWE-119 (falhas de gerenciamento de memória, como buffer overflow) como categoria dominante — padrão típico de aplicações que processam múltiplos formatos de arquivo. A taxa de exploração ativa está abaixo da média geral do catálogo CISA KEV, sem nenhum registro no KEV até o momento, e a ausência de PoCs públicas conhecidas reduz a exposição imediata. A CVE mais relevante no contexto atual é CVE-2013-3944, com score EPSS de 0,275, indicando probabilidade não trivial de exploração apesar da sua antiguidade — o que sugere que vulnerabilidades históricas nessa base de código merecem atenção em ambientes onde o software ainda está em uso. A inexistência de novas CVEs nos últimos 90 dias pode refletir menor atividade de pesquisa recente, mas não deve ser interpretada como ausência de risco residual na superfície de ataque legada.

CVE-2024-11564HIGHIrfanView DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11570HIGHIrfanView DXF File Parsing Use-After-Free Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11534HIGHIrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11522HIGHIrfanView DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11538HIGHIrfanView DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11533HIGHIrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11532HIGHIrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11552HIGHIrfanView DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11556HIGHIrfanView DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11535HIGHIrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11549HIGHIrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11526HIGHIrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11572HIGHIrfanView DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11550HIGHIrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11543HIGHIrfanView DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11547HIGHIrfanView DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11542HIGHIrfanView DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11548HIGHIrfanView DWG File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11551HIGHIrfanView DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-11527HIGHIrfanView DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.4%