Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-107125

XnView Classic FLI File heap-based overflow

Description

A flaw has been found in XnView Classic 2.52.5. Impacted is an unknown function of the component FLI File Parser. This manipulation of the argument starting_line causes heap-based buffer overflow. Remote exploitation of the attack is possible. Upgrading to version 2.52.6 is recommended to address this issue. Upgrading the affected component is advised.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

XnView Classic

  • 2.52.5affected
  • 2.52.6unaffected

References