CVE Watch9 jul 2026

CVE-2020-23546

IrfanView 4.54 allows attackers to cause a denial of service or possibly other unspecified impacts via a crafted XBM file, related to a "Dat

CVSS

7.8

Alto

EPSS

0.9%

p56

KEV

—

Exploit Today

0-100

Publicado: 28 oct 2021 · Última mod.: 9 jul 2026

EPSS · 30d

0.9%EPSS · 30 días1.0%

2026-06-302026-07-16

Descripción técnica

IrfanView 4.54 allows attackers to cause a denial of service or possibly other unspecified impacts via a crafted XBM file, related to a "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at FORMATS!ReadMosaic+0x0000000000000981.

Referencias oficiales

github.comhttps://github.com/nhiephon/Research/blob/master/README.md
www.irfanview.comhttps://www.irfanview.com/plugins.htm
github.comhttps://github.com/nhiephon/Research/blob/master/README.md
www.irfanview.comhttps://www.irfanview.com/plugins.htm

CVEs relacionados

Sin CVEs relacionados por CWE o producto.