Priority MEDIUM 57
A flaw has been found in XnView Classic 2.52.5.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00315 · Published 2026-10-07 · Fixed in 2.52.6 CWE-119
Priority MEDIUM 61
XnSoft NConvert 7.230 is vulnerable to Use-After-Free via a crafted .tiff file
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00164 · Published 2026-03-23 · No fix listed CWE-416
Priority MEDIUM 61
XnSoft NConvert 7.230 is vulnerable to Stack Buffer Overrun via a crafted .tiff file.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00164 · Published 2026-03-23 · No fix listed CWE-120
Priority MEDIUM 41
XnSoft XnView Classic RWZ File Parsing Integer Underflow Remote Code Execution Vulnerability.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00488 · Published 2024-12-11 · No fix listed CWE-191
Priority MEDIUM 62
Buffer Overflow vulnerability in XNSoft NConvert 7.163 (for Windows x86) allows attackers to cause a denial of service via crafted xwd file.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01126 · Published 2024-02-28 · No fix listed CWE-122
Priority MEDIUM 43
XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00745 · Published 2023-12-29 · No fix listed CWE-787
Priority HIGH 82
XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00578 · Published 2023-12-29 · No fix listed CWE-787
Priority LOW 35
Buffer Overflow vulnerability in XnView Classic v.2.51.5 allows a local attacker to execute arbitrary code via a crafted TIF file.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0022 · Published 2023-10-27 · No fix listed CWE-120
Priority HIGH 69
XNSoft Nconvert 7.136 is vulnerable to Buffer Overflow via a crafted image file.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00538 · Published 2023-10-19 · No fix listed CWE-787
Priority HIGH 69
XNSoft Nconvert 7.136 has an Exception Handler Chain Corrupted via a crafted image file.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00576 · Published 2023-10-19 · No fix listed CWE-755
Priority LOW 37
XNSoft Nconvert 7.136 is vulnerable to Buffer Overflow.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00659 · Published 2023-10-18 · No fix listed CWE-120
Priority LOW 36
Buffer Overflow vulnerability in XNView before 2.50, allows local attackers to execute arbitrary code via crafted GEM bitmap file.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00343 · Published 2023-08-11 · No fix listed CWE-120
Priority LOW 36
Buffer Overflow vulnerability in XNView version 2.49.3, allows local attackers to execute arbitrary code via crafted TIFF file.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00271 · Published 2023-08-11 · No fix listed CWE-120
Priority LOW 26
XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service (DoS) via a crafted ico file.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.0072 · Published 2021-11-10 · No fix listed CWE-787
Priority LOW 27
XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service (DoS) via a crafted pict file.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00979 · Published 2021-11-10 · No fix listed CWE-787
Priority MEDIUM 45
XnView 2.03 has an integer overflow vulnerability
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01623 · Published 2020-01-27 · No fix listed CWE-190
Priority MEDIUM 45
XnView 2.03 has a stack-based buffer overflow vulnerability
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01539 · Published 2020-01-27 · No fix listed CWE-787
Priority LOW 39
Stack-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted image layer in an XCF file.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02401 · Published 2020-01-02 · Fixed in 2.03 CWE-787
Priority LOW 39
Heap-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted RLE compressed layer in an XCF file.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02401 · Published 2020-01-02 · Fixed in 2.03 CWE-787
Priority LOW 38
Heap-based buffer overflow in xnview.exe in XnView before 2.13 allows remote attackers to execute arbitrary code via the biBitCount field in a BMP file.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01745 · Published 2020-01-02 · Fixed in 2.13 CWE-787
Priority LOW 38
xnview.exe in XnView before 2.13 does not properly handle RLE strip lengths during processing of RGB files, which allows remote attackers to execute arbitrary code via the RLE strip size field in a RGB file, which leads…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01726 · Published 2020-01-02 · Fixed in 2.13 CWE-787
Priority MEDIUM 47
Xjp2.dll in XnView before 2.13 allows remote attackers to execute arbitrary code via (1) the Csiz parameter in a SIZ marker, which triggers an incorrect memory allocation, or (2) the lqcd field in a QCD marker in a craft…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02757 · Published 2020-01-02 · Fixed in 2.13 CWE-787
Priority LOW 34
XnView Classic 2.49.1 allows a User Mode Write AV starting at Xwsq+0x0000000000001fc0.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00437 · Published 2019-10-08 · No fix listed CWE-787
Priority LOW 34
XnView Classic 2.49.1 allows a User Mode Write AV starting at Xwsq+0x0000000000001e51.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00437 · Published 2019-10-08 · No fix listed CWE-787
Priority LOW 36
XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x00000000003283eb.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.01209 · Published 2019-07-04 · No fix listed
Load more