CVE-2021-46064

—

CVSS 3.1

7.8 high

EPSS

1%p64

Published

Mar 23, 2022 (Mar 23, 2022)

Modified

Jul 9, 2026

Description

IrfanView 4.59 is vulnerable to buffer overflow via the function at address 0x413c70 (in 32bit version of the binary). The vulnerability triggers when the user opens malicious .tiff image.

Vendors: irfanview
Products: irfanview
Weakness: CWE-120
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.