VULNERABILITY INTELLIGENCE

CVE-2021-46064

CVSS score7.8 HIGH
EPSS probability1.13%
CISA KEVNot currently listed
Published2022-03-23
Last modified2026-07-09
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

IrfanView 4.59 is vulnerable to buffer overflow via the function at address 0x413c70 (in 32bit version of the binary). The vulnerability triggers when the user opens malicious .tiff image.

Weakness classification

  • nvd@nist.gov: CWE-120

Primary references