CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCVE-2023-43252
High (7.8) in xnview nconvert. EPSS 0.5% chance of exploitation in the next 30 days.
XNSoft Nconvert 7.136 is vulnerable to Buffer Overflow via a crafted image file.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
- CWE
- CWE-787
- Published
- Modified
- Record from
- the NVD, synced
Affected
- xnview:nconvert
References
- http://packetstormsecurity.com/files/175145/XNSoft-Nconvert-7.136-Buffer-Overflow-Denial-Of-Service.html
- http://seclists.org/fulldisclosure/2023/Oct/15
- https://github.com/mrtouch93/exploits/tree/main/NConvert7.136/Stack%20Buffer%20Overrun
- https://www.xnview.com/en/nconvert/
- http://packetstormsecurity.com/files/175145/XNSoft-Nconvert-7.136-Buffer-Overflow-Denial-Of-Service.html