What’s Vulnerable › Vulnerabilities

CVE-2023-52173

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-12-29 · updated 2026-06-17
• Weakness: CWE-787

Description

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0.

Affected products

• Xnview Classic: before 2.51.3 — fixed in 2.51.3

How to fix

Upgrade to a fixed version: Xnview Classic 2.51.3. Check the vendor advisory for mitigations.

References

• https://github.com/seyit-sigirci/Vulnerability-Disclosures/blob/main/XNView-Crash-Reports/BOF%5B0x54D%5D%2B3%7B%2B0~3%23460c%7D%20469.15d%20%40%20xnview.exe%2B0x3ADBD0.html
• https://newsgroup.xnview.com/viewtopic.php?f=35&t=46016
• https://github.com/seyit-sigirci/Vulnerability-Disclosures/blob/main/XNView-Crash-Reports/BOF%5B0x54D%5D%2B3%7B%2B0~3%23460c%7D%20469.15d%20%40%20xnview.exe%2B0x3ADBD0.html
• https://newsgroup.xnview.com/viewtopic.php?f=35&t=46016

Get alerted when CVE-2023-52173 or the next vulnerability affects your stack