CVE-2024-11562

Summary

CVE-2024-11562 is a remote code execution vulnerability affecting IrfanView, a popular image viewer software. The flaw, identified as ZDI-CAN-24858, stems from an out-of-bounds read issue in the software's handling of CGM (Compact Graphics Media) files. Due to insufficient validation of user-supplied data, an attacker can manipulate CGM files to read beyond the allocated buffer, resulting in code execution within the IrfanView process. Exploitation of this vulnerability requires users to visit a malicious webpage or open a specially crafted file.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.