CVE-2024-11506

Summary

CVE-2024-11506 is an out-of-bounds read remote code execution vulnerability affecting IrfanView. Malicious DWG files can exploit this weakness by causing the software to read data from unallocated memory. This allows an attacker to execute arbitrary code on affected installations. User interaction is necessary, as the target must visit a malicious webpage or open a malicious file. The root cause of the issue lies in the improper validation of user-supplied data during DWG file parsing.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.