CVE-2024-11540

Summary

CVE-2024-11540 is a remote code execution vulnerability affecting IrfanView. Malicious DXF files can trigger an out-of-bounds read, allowing attackers to execute arbitrary code on affected systems. The flaw stems from insufficient validation of user-supplied data during DXF file parsing. User interaction is necessary for exploitation, either through visiting a malicious webpage or opening a malicious file. This vulnerability was identified as ZDI-CAN-24700 in the Zero Day Initiative database.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.