What’s Vulnerable › Vulnerabilities

CVE-2024-31007

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-10-21 · updated 2026-06-17
• Weakness: CWE-120

Description

Buffer Overflow vulnerability in IrfanView 32bit v.4.66 allows a local attacker to cause a denial of service via a crafted file. Affected component is IrfanView 32bit 4.66 with plugin formats.dll.

Affected products

• IrfanView: 4.66_32bit

References

• https://github.com/kirito999/IrfanViewBug
• https://mediaside.net/irfanview-italia/2024/04/12/4-67-data-di-rilascio-5-aprile-2024/
• https://www.fosshub.com/IrfanView.html?dwl=iview466_plugins.zip
• https://www.fosshub.com/IrfanView.html?dwl=iview466_setup.exe

Get alerted when CVE-2024-31007 or the next vulnerability affects your stack