Listen to this Post
How the CVE Works
The vulnerability exists in the IrfanView CADImage Plugin when parsing DWG files. Attackers craft a malicious DWG file with malformed data structures, triggering an out-of-bounds read due to insufficient boundary checks. When a victim opens the file, the plugin reads past the allocated buffer, corrupting memory and allowing arbitrary code execution within the context of the application. Exploitation requires user interaction (opening the malicious file), but successful attacks can lead to full system compromise.
DailyCVE Form
Platform: IrfanView CADImage Plugin
Version: <= 4.60
Vulnerability: Out-of-Bounds Read → RCE
Severity: Critical
Date: 07/25/2025
Prediction: Patch expected by 08/15/2025
What Undercode Say
Analytics:
strings malicious.dwg | grep "ACAD" gdb -ex "disas parse_dwg_header" -ex "q" irfanview_plugin.dll
How Exploit:
- Craft DWG with oversized object table.
- Trigger OOB read via malformed header.
- Overwrite EIP for RCE.
Protection from this CVE:
- Disable CADImage Plugin.
- Apply vendor patch.
- Restrict DWG file execution.
Impact:
- Remote Code Execution.
- System compromise.
- Privilege escalation.
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
