CVE-2024-6822

Summary

CVE-2024-6822 is an out-of-bounds write vulnerability in IrfanView's handling of CIN files. This weakness allows remote attackers to execute arbitrary code on affected systems by manipulating user-supplied data during file parsing. The flaw occurs due to insufficient validation, resulting in writing data past the end of an allocated buffer. Exploitation requires users to visit a malicious webpage or open a maliciously crafted file. This vulnerability, also known as ZDI-CAN-23261, poses a significant risk to IrfanView installations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.