CVE-2021-46064

7.8 highEPSS 1.1%

High (7.8) in irfanview irfanview. EPSS 1.1% chance of exploitation in the next 30 days.

IrfanView 4.59 is vulnerable to buffer overflow via the function at address 0x413c70 (in 32bit version of the binary). The vulnerability triggers when the user opens malicious .tiff image.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
CWE: CWE-120
Published: 2022-03-23
Modified: 2026-07-09
Record from: the NVD, synced 2026-10-19

Affected

irfanview:irfanview

References

https://www.irfanview.info/main_history.htm
https://www.irfanview.info/main_history.htm

Check your stack JSON