Classic
Monthly
Heap-based buffer overflow in XnView Classic 2.52.5 allows a crafted FLI file to corrupt heap memory when a victim opens it, requiring user interaction and no authentication; publicly available exploit code exists per the CVSS v4.0 E:P metric. This client-side parsing flaw has low confidentiality, integrity, and availability impact, making it a moderate-severity, low-priority issue, and upgrading to version 2.52.6 is recommended.
Heap-based buffer overflow in XnView Classic 2.52.5 allows a crafted FLI file to corrupt heap memory when a victim opens it, requiring user interaction and no authentication; publicly available exploit code exists per the CVSS v4.0 E:P metric. This client-side parsing flaw has low confidentiality, integrity, and availability impact, making it a moderate-severity, low-priority issue, and upgrading to version 2.52.6 is recommended.