VULNERABILITY INTELLIGENCE

CVE-2021-29365

CVSS score5.5 MEDIUM
EPSS probability0.66%
CISA KEVNot currently listed
Published2021-09-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Description

Irfanview 4.57 is affected by an infinite loop when processing a crafted BMP file in the EFFECTS!AutoCrop_W component. This can cause a denial of service (DOS).

Weakness classification

  • nvd@nist.gov: CWE-835

Primary references