CVE-2024-11532

Summary

CVE-2024-11532 is a remote code execution vulnerability affecting IrfanView. Malicious DXF files can trigger an out-of-bounds write during parsing, allowing attackers to execute arbitrary code on affected systems. User interaction is necessary, as the target must visit a malicious webpage or open a specially crafted file. This vulnerability (ZDI-CAN-24615) stems from insufficient data validation, leading to potential buffer overflows and code injection.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.