CVE-2026-101203

A vulnerability has been found in FastStone Image Viewer up to 8.3. The impacted element is an unknown function of the component 1bpp RLE Decoder. The manipulation leads to out-of-bounds write. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
VulDBCNA
6.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
faststoneimage_viewer
8.0
CNA
faststoneimage_viewer
8.1
CNA
faststoneimage_viewer
8.2
CNA
faststoneimage_viewer
8.3
CNA
Common Weakness Enumeration
References
https://vuldb.com/cve/CVE-2026-101203
https://vuldb.com/submit/907575
https://vuldb.com/vuln/411012
https://vuldb.com/vuln/411012/cti