CVE-2024-11534

Summary

CVE-2024-11534 is an out-of-bounds read remote code execution vulnerability affecting IrfanView, a popular image viewing software. This issue arises due to insufficient validation of user-supplied data during DXF file parsing, enabling remote attackers to read beyond the allocated buffer and execute arbitrary code. User interaction, such as visiting a malicious webpage or opening a specially crafted file, is required for exploitation. The vulnerability, identified as ZDI-CAN-24617, can grant attackers the ability to execute code in the context of the current process.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.