CVE-2021-27224

The CVE-2021-27224 entry concerns IrfanView 4.57 with the WPG plugin (WPG.dll) prior to version 3.1.0.0. A user-mode write access violation in WPG (starting at WPG+0x...12ec6) could allow remote attackers to execute arbitrary code. Public sources consistently describe an out-of-bounds/write condi...

CVE-2021-27362

The CVE-2021-27362 entry concerns the IrfanView WPG plugin (older than 3.1.0.0) used with IrfanView 4.57, where a Read Access Violation on control flow (WPG!ReadWPG_W+0x…133) could allow remote attackers to execute arbitrary code. This vulnerability is described across multiple sources as an out-...