CVE-2026-107125
6.3 MEDIUMPublished 2026-10-07 · Updated 2026-10-07
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
A flaw has been found in XnView Classic 2.52.5. Impacted is an unknown function of the component FLI File Parser. This manipulation of the argument starting_line causes heap-based buffer overflow. Remote exploitation of the attack is possible. Upgrading to version 2.52.6 is recommended to address this issue. Upgrading the affected component is advised.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Weaknesses
CWE-119, CWE-122
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- CRITICALCVE-2026-110958
- MEDIUMCVE-2026-18784PoC
- HIGHCVE-2026-93962PoC
- HIGHCVE-2026-94424
- CRITICALCVE-2016-15059PoC
- HIGHCVE-2016-15060PoC
- CRITICALCVE-2017-20241
- LOWCVE-2025-1218PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.