CVE-2024-11536

CVE-2024-11536 describes an out-of-bounds read in IrfanView’s DXF file parsing that enables remote code execution after a user opens a malicious DXF file or visits a malicious page. The root cause is insufficient validation while parsing DXF data, enabling a read past the end of an allocated buff...