CVE-2020-23886

XnView MP 0.96.4 is affected by a heap overflow in the image-pict processing path, enabling denial of service. Exploit path is a crafted pict file, with the fault linked to a User Mode Write AV starting at ntdll!RtlpLowFragHeapFree. Public documents do not specify a patched version; Red Hat/other...

CVE-2020-23887

XnView MP v0.96.4 is affected by a heap-based buffer overflow that can be triggered by a crafted ICO file, leading to a denial of service. The issue is described as a Read Access Violation beginning at USER32!SmartStretchDIBits+0x33. Connected sources confirm the vulnerability in XnView MP, but d...

CVE-2019-9965

XnView MP 0.93.1 for Windows is affected by CVE-2019-9965. A crafted file can cause a denial-of-service (application crash) and potentially other unspecified impact, via the Windows heap allocator function ntdll!RtlReAllocateHeap. The vulnerability is documented across multiple feeds (NVD, Red Ha...

CVE-2019-9962

The CVE-2019-9962 entry concerns XnView MP 0.93.1 on Windows. The vulnerability arises from handling crafted files that trigger a crash (denial of service) and potentially other unspecified impacts, linked to VCRUNTIME140!memcpy. Affected component is the image viewer application (XnView MP 0.93....

CVE-2019-9964

XnView MP 0.93.1 on Windows is affected by CVE-2019-9964. A crafted file can trigger a denial of service (application crash) and possibly other unspecified impact, related to ntdll!RtlpNtMakeTemporaryKey. Affected component is the image viewer executable (XnView MP 0.93.1) and the vulnerability c...

CVE-2019-9963

XnView MP 0.93.1 on Windows is vulnerable to a denial of service via a crafted file, related to ntdll!RtlFreeHeap. Multiple sources (NVD/NVD-derived entries and CNVD/Red Hat mirrors) confirm the impact as a crash and potential unspecified consequences. The vulnerability affects the Windows build ...