CyberSecBulletin

XnView vulnerabilities

We track 3 vulnerabilities in XnView products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 12, 2024.

3vulnerabilities
0critical
3high
0exploited
8.1average CVSS score

Latest XnView vulnerabilities

  • 8.8 High severity

    XnView Classic: Integer Underflow (Wrap or Wraparound)

    CVE-2024-11950XnSoft

    XnSoft XnView Classic RWZ File Parsing Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of XnSoft XnView Classic. User interaction is required to exploit this

  • 7.8 High severity

    Nconvert: Improper Handling of Exceptional Conditions

    CVE-2023-43251XnView

    XNSoft Nconvert 7.136 has an Exception Handler Chain Corrupted via a crafted image file. Attackers could exploit this issue for a Denial of Service (DoS) or possibly to achieve code execution.

  • 7.8 High severity

    nconvert: Buffer Copy without Checking Size of Input

    CVE-2023-43250XnView

    XNSoft Nconvert 7.136 is vulnerable to Buffer Overflow. There is a User Mode Write AV via a crafted image file. Attackers could exploit this issue for a Denial of Service (DoS) or possibly to achieve code execution.