Vulnerabilities in IrfanView

184 results
Vexday analysis

O IrfanView acumula 183 CVEs catalogadas, volume considerável para um visualizador de imagens, com CWE-119 (falhas de gerenciamento de memória, como buffer overflow) como categoria dominante — padrão típico de aplicações que processam múltiplos formatos de arquivo. A taxa de exploração ativa está abaixo da média geral do catálogo CISA KEV, sem nenhum registro no KEV até o momento, e a ausência de PoCs públicas conhecidas reduz a exposição imediata. A CVE mais relevante no contexto atual é CVE-2013-3944, com score EPSS de 0,275, indicando probabilidade não trivial de exploração apesar da sua antiguidade — o que sugere que vulnerabilidades históricas nessa base de código merecem atenção em ambientes onde o software ainda está em uso. A inexistência de novas CVEs nos últimos 90 dias pode refletir menor atividade de pesquisa recente, mas não deve ser interpretada como ausência de risco residual na superfície de ataque legada.

CVE-2025-7288HIGHIrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7292HIGHIrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7297HIGHIrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7300HIGHIrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7322HIGHIrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7321HIGHIrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7268HIGHIrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7277HIGHIrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7279HIGHIrfanView CADImage Plugin CGM File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7239HIGHIrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7282HIGHIrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7238HIGHIrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7264HIGHIrfanView CADImage Plugin CGM File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7260HIGHIrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7271HIGHIrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7236HIGHIrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7269HIGHIrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7267HIGHIrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7275HIGHIrfanView CADImage Plugin CGM File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7273HIGHIrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityEPSS 0.2%