CVE-2025-7305

The CVE-2025-7305 entry concerns the IrfanView CADImage Plugin. Affected component: DWG file parsing within the plugin. Root cause: insufficient validation of user-supplied data during DWG parsing, leading to memory corruption. Impact: remote code execution in the context of the vulnerable proces...

CVE-2025-7303

CVE-2025-7303 concerns IrfanView CADImage Plugin. The connected sources confirm a vulnerability in DWG file parsing where lack of proper validation of user-supplied data leads to memory corruption, enabling remote code execution in the plugin process. Affected component: IrfanView CADImage Plugin...

CVE-2025-7256

CVE-2025-7256 describes a memory corruption/ buffer overflow in the IrfanView CADImage Plugin when parsing DXF files, leading to remote code execution. The vulnerability stems from improper validation of user-supplied data during DXF parsing, allowing an attacker to run arbitrary code in the cont...

CVE-2025-7278

CVE-2025-7278 affects the IrfanView CADImage Plugin. The vulnerability lies in DXF file parsing where insufficient validation of user-supplied data can cause a memory corruption condition, enabling remote code execution in the plugin’s process. Attacks require user interaction (visiting a malicio...

CVE-2025-7250

CVE-2025-7250 affects IrfanView CADImage Plugin (DWG parsing). The bug is a lack of validation during DWG file parsing, causing a read past the end of an allocated buffer (out-of-bounds read) that enables remote code execution in the plugin’s process. Attack requires user interaction (visiting a ...

CVE-2025-7314

CVE-2025-7314 affects IrfanView CADImage Plugin and relates to memory corruption during DWG file parsing due to insufficient input validation. The vulnerability permits remote code execution with user interaction required (target must open a malicious DWG or visit a malicious page). Root cause is...

CVE-2025-7242

CVE-2025-7242 : The IrfanView CADImage Plugin is affected. The vulnerability lies in DWG file parsing where insufficient validation allows an out-of-bounds read, which can lead to remote code execution in the plugin process. Exploitation requires user interaction (visiting a malicious page or ope...

CVE-2025-7253

CVE-2025-7253 details a memory corruption vulnerability in the IrfanView CADImage Plugin when parsing DWG files. The flaw arises from insufficient validation of DWG data, allowing an attacker who can lure a user to open a malicious file or visit a malicious page to trigger code execution in the p...

CVE-2025-7270

CVE-2025-7270 concerns IrfanView CADImage Plugin, where DWG file parsing lacks proper validation, causing a memory corruption that can enable remote code execution. Affected: IrfanView CADImage Plugin (DWG parsing path). Impact: attacker can execute code in the context of the target process; atta...

CVE-2025-7310

CVE-2025-7310 affects the IrfanView CADImage Plugin. The vulnerability arises in DWG file parsing due to insufficient validation of user-supplied data, leading to memory corruption and potential remote code execution. Exploitation requires user interaction (the target must open a malicious file o...

CVE-2025-7249

CVE-2025-7249 affects IrfanView CADImage Plugin and is a DWG file parsing memory corruption vulnerability. The flaw stems from insufficient validation of DWG data, enabling remote code execution in the plugin’s process when a user opens a malicious DWG or visits a malicious page. Attack scenario ...

CVE-2025-7272

CVE-2025-7272 concerns IrfanView CADImage Plugin, where parsing of DXF files can trigger a memory corruption leading to remote code execution. The flaw is tied to insufficient validation of user-supplied data during DXF parsing, allowing an attacker to run arbitrary code in the context of the aff...

CVE-2025-7258

CVE-2025-7258 : IrfanView CADImage Plugin DWG file parser contains a buffer handling fault that leads to an out-of-bounds write and remote code execution. The flaw arises from insufficient validation of DWG file data, enabling an attacker to write past an allocated buffer and execute code in the ...

CVE-2025-7260

The CVE-2025-7260 entry concerns IrfanView CADImage Plugin and a DXF file parsing issue. A buffer/Out‑Of‑Bounds write in the DXF parser can allow code execution in the plugin’s process. Affected component is the CADImage Plugin’s DXF/DWG parsing path; root cause is improper validation of user-sup...

CVE-2025-7276

CVE-2025-7276 concerns the IrfanView CADImage Plugin and its handling of DXF file parsing. The flaw is a memory corruption condition caused by insufficient validation of user-supplied data during DXF parsing, which can allow a remote attacker to execute arbitrary code in the context of the curren...

CVE-2025-7238

The CVE-2025-7238 entry concerns the IrfanView CADImage Plugin, where DXF file parsing is vulnerable to an Out-Of-Bounds Write/Buffer Overflow. The flaw arises from insufficient validation of user-supplied data during DXF parsing, allowing an attacker to write past the end of an allocated buffer ...

CVE-2025-7277

CVE-2025-7277 affects IrfanView CADImage Plugin and its DWG file parsing. The vulnerability arises from insufficient validation of user-supplied data during DWG parsing, leading to a memory corruption condition that can be exploited to execute arbitrary code in the plugin process. Successful expl...

CVE-2025-7284

Summary (CVE-2025-7284) : The IrfanView CADImage Plugin is affected by a memory corruption vulnerability in DWG file parsing, allowing remote code execution after processing unvalidated user data. The issue is rooted in insufficient validation during DWG parsing and can be triggered by a user vis...

CVE-2025-7288

CVE-2025-7288 concerns IrfanView CADImage Plugin: DXF file parsing leads to memory corruption that can allow remote code execution. The flaw arises from insufficient validation of user-supplied data during DXF parsing. Exploitation requires user interaction (visiting a malicious page or opening a...

CVE-2025-7322

CVE-2025-7322 affects the IrfanView CADImage Plugin, where DWG file parsing can trigger an out-of-bounds read due to insufficient validation of user-supplied data. The issue can allow arbitrary code execution in the context of the current process and requires user interaction (target must open a ...

CVE-2025-7266

CVE-2025-7266 affects IrfanView CADImage Plugin, with memory corruption in DXF file parsing leading to remote code execution. The root cause is improper validation of user-supplied DXF data during parsing, enabling an attacker to execute code in the context of the target process. Exploitation req...

CVE-2025-7273

CVE-2025-7273 affects IrfanView CADImage Plugin. The DXF parser flaw allows out-of-bounds reads due to insufficient input validation, potentially enabling code execution in the current process. Exploitation details are tied to ZDI-26202; CVSS hints at local attack with user interaction required. ...

CVE-2025-7299

CVE-2025-7299 affects IrfanView CADImage Plugin; DWG file parsing has memory corruption that can allow arbitrary code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). Root cause: insufficient validation during DWG parsing; impact is remote...

CVE-2025-7237

CVE-2025-7237 concerns IrfanView CADImage Plugin. The flaw lies in DWG file parsing where lack of input validation leads to a memory corruption condition that can allow remote code execution. Exploit requires user interaction (target must open a malicious file or visit a malicious page). The issu...

CVE-2025-7247

CVE-2025-7247 concerns the IrfanView CADImage Plugin. The vulnerability stems from an out-of-bounds read during DXF file parsing caused by insufficient validation of user-supplied data, which can lead to remote code execution in the context of the affected process. The issue is triggered when a u...

CVE-2025-7269

The CVE-2025-7269 entry documents a vulnerability in the IrfanView CADImage Plugin where DXF file parsing contains a lack of input validation, allowing an out-of-bounds read that can enable arbitrary code execution in the attacker-controlled process. Exploitation requires user interaction (visiti...

CVE-2025-7286

CVE-2025-7286 affects the IrfanView CADImage Plugin, specifically during DXF file parsing. The flaw arises from insufficient validation of user-supplied data, leading to memory corruption and enabling remote code execution in the plugin process. Exploitation requires user interaction (visiting a ...

CVE-2025-7289

CVE-2025-7289 affects the IrfanView CADImage Plugin. The issue is a memory corruption vulnerability in DXF file parsing caused by insufficient validation of user-supplied data, allowing an attacker to execute arbitrary code in the plugin process. Exploitation requires user interaction (e.g., visi...

CVE-2025-7236

CVE-2025-7236 concerns the IrfanView CADImage Plugin, where parsing DWG files can trigger a memory corruption due to lack of validation of user-supplied data. This vulnerability may allow remote code execution with the current process context if a user opens a malicious DWG file or visits a craft...

CVE-2025-7246

The CVE-2025-7246 entry concerns IrfanView CADImage Plugin DWG file parsing. The vulnerability is a memory corruption issue in the DWG parser that can lead to remote code execution. Exploitation requires user interaction (target visits a malicious page or opens a malicious file). The flaw stems f...

CVE-2025-7257

The CVE-2025-7257 entry involves the IrfanView CADImage Plugin and a vulnerability in the DXF file parsing path. The flaw is described as a memory corruption issue caused by inadequate validation of DXF data, which can allow remote code execution in the context of the current process. Access to t...

CVE-2025-7282

This CVE concerns IrfanView CADImage Plugin (DXF File Parsing) causing memory corruption and remote code execution. The flaw arises from insufficient validation during DXF parsing, allowing arbitrary code execution in the plugin’s process. Impact is high (C:H/I:H/A:H per ZDI metrics). Exploitatio...

CVE-2025-7321

CVE-2025-7321 concerns the IrfanView CADImage Plugin. Multiple connected sources confirm a vulnerability in DWG file parsing that leads to a memory corruption condition, enabling remote code execution in the plugin process. The flaw arises from insufficient validation of user-supplied data during...

CVE-2025-7265

CVE-2025-7265 affects IrfanView CADImage Plugin. The vulnerability is in CGM file parsing, caused by improper validation of user-supplied data, leading to an out-of-bounds read/write and enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a...

CVE-2025-7283

CVE-2025-7283 affects IrfanView CADImage Plugin where DWG file parsing lacks proper validation, causing memory corruption that enables remote code execution. The flaw is within DWG parsing, with exploitation possible via crafted files or pages; user interaction is required (target must open a mal...

CVE-2025-7296

CVE-2025-7296 concerns IrfanView CADImage Plugin. The flaw lies in parsing DXF files, where lack of input validation can cause memory corruption, enabling arbitrary code execution in the plugin process. Impact is remote code execution with the attacker controlling the context after the user visit...

CVE-2025-7313

CVE-2025-7313 affects the IrfanView CADImage Plugin and is caused by inadequate validation during DWG file parsing, leading to memory corruption and potential remote code execution. The vulnerability is triggered when a user visits a malicious page or opens a malicious file, requiring user intera...

CVE-2025-7235

CVE-2025-7235 affects IrfanView CADImage Plugin. The issue is a DXF file parser buffer overflow caused by improper validation of user-supplied data, leading to an out-of-bounds write and remote code execution in the plugin context. Exploitation requires user interaction (visiting a malicious page...

CVE-2025-7244

CVE-2025-7244: IrfanView CADImage Plugin DWG parsing memory corruption leading to remote code execution . The available sources state that the vulnerability resides in the DWG file parser of the IrfanView CADImage Plugin, caused by insufficient validation of user-supplied data during DWG parsing,...

CVE-2025-7267

CVE-2025-7267 affects IrfanView CADImage Plugin. Vulnerability in DXF file parsing allows out-of-bounds read, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). Evidence from ZDI advisories (ZDI-25-515) confirms a code-e...

CVE-2025-7271

CVE-2025-7271 concerns IrfanView’s CADImage Plugin. The flaw is in DXF file parsing, where lack of validation can cause memory corruption, enabling remote code execution in the plugin process. Exploitation requires user interaction (target must open a malicious page or file). The issue is documen...

CVE-2025-7274

CVE-2025-7274 affects IrfanView CADImage Plugin. The flaw is in DWG file parsing, caused by insufficient validation of user-supplied data, leading to memory corruption and remote code execution in the plugin process. The vulnerability requires user interaction (visiting a malicious page or openin...

CVE-2025-7275

The CVE-2025-7275 entry concerns IrfanView CADImage Plugin CGM file parsing. The flaw is in CGM data handling where insufficient validation causes an out-of-bounds read, enabling remote code execution. Impact is described as arbitrary code execution in the context of the current process, with use...

CVE-2025-7279

CVE-2025-7279 concerns IrfanView CADImage Plugin. The vulnerability is a CGM file parsing out-of-bounds read due to insufficient validation of user-supplied data, which can lead to arbitrary code execution in the plugin process. Reported details indicate user interaction is required (visiting a m...

CVE-2025-7317

The CVE-2025-7317 entry concerns IrfanView CADImage Plugin with a DWG parsing memory corruption flaw. The root cause is lack of proper validation of user-supplied data during DWG file parsing, leading to memory corruption that can enable remote code execution in the plugin process. Exploitation r...

CVE-2025-7325

CVE-2025-7325 concerns the IrfanView CADImage Plugin, where the DXF file parsing contains a memory corruption flaw. The vulnerability can allow remote code execution in the context of the affected process, with user interaction required (visiting a crafted page or opening a malicious file). The i...

CVE-2025-7233

CVE-2025-7233 corresponds to IrfanView CADImage Plugin DWG parsing. The vulnerability is an out-of-bounds read in DWG file parsing due to improper input validation, potentially enabling information disclosure and, per the advisory, could be leveraged with other issues to execute arbitrary code in...

CVE-2025-7261

CVE-2025-7261 concerns the IrfanView CADImage Plugin DWG file parser. The issue is an out-of-bounds read caused by insufficient validation while parsing DWG files, allowing an attacker to execute code in the process context. Documents indicate this is a remote code execution vulnerability requiri...

CVE-2025-7268

The CVE-2025-7268 entry concerns IrfanView CADImage Plugin with a DXF file parsing flaw. The issue is a lack of proper validation during DXF parsing, causing an out-of-bounds read that can be leveraged to execute code in the plugin process. Exploitation requires user interaction (visiting a malic...

CVE-2025-7298

CVE-2025-7298 concerns IrfanView CADImage Plugin, where DXF file parsing lacks proper validation, enabling an out-of-bounds read that can lead to remote code execution. Affected component: CADImage Plugin’s DXF parser. Impact: arbitrary code execution in the plugin context if a user opens a craft...