What’s Vulnerable › Vulnerabilities

CVE-2023-52174

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-12-29 · updated 2026-06-17
• Weakness: CWE-787

Description

XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6.

Affected products

• Xnview Classic: before 2.51.3 — fixed in 2.51.3

How to fix

Upgrade to a fixed version: Xnview Classic 2.51.3. Check the vendor advisory for mitigations.

References

• https://github.com/seyit-sigirci/Vulnerability-Disclosures/blob/main/XNView-Crash-Reports/BOF%5B0x1C94%5D%2B4%7B%2B0~4%231b99%7D%20128.ecf%20%40%20xnview.exe%2B0x3125D6.html
• https://newsgroup.xnview.com/viewtopic.php?f=35&t=46016
• https://github.com/seyit-sigirci/Vulnerability-Disclosures/blob/main/XNView-Crash-Reports/BOF%5B0x1C94%5D%2B4%7B%2B0~4%231b99%7D%20128.ecf%20%40%20xnview.exe%2B0x3125D6.html
• https://newsgroup.xnview.com/viewtopic.php?f=35&t=46016

Get alerted when CVE-2023-52174 or the next vulnerability affects your stack