CVE-2024-11516

Summary

CVE-2024-11516 is a heap-based buffer overflow vulnerability in IrfanView's JPM file parsing functionality. This issue allows remote code execution, meaning an attacker can exploit this vulnerability by making the target visit a malicious webpage or open a specially crafted file. The flaw stems from insufficient validation of user-supplied data before copying it to a heap-buffer, enabling attackers to inject and execute arbitrary code in the context of the affected IrfanView installation. (ZDI-CAN-24011 first disclosed this vulnerability.)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.