CVE-2021-28835

HIGH

Xnview < 2.50 - Buffer Overflow

Title source: rule

Description

Buffer Overflow vulnerability in XNView before 2.50, allows local attackers to execute arbitrary code via crafted GEM bitmap file.

References (2)

Scores

CVSS v3 7.8
EPSS 0.0003
EPSS Percentile 6.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Classification

CWE
CWE-120
Status published

Affected Products (1)

xnview/xnview < 2.50

Timeline

Published Aug 11, 2023
Tracked Since Feb 18, 2026