CVE-2026-107125

EUVD-2026-94360
A flaw has been found in XnView Classic 2.52.5. Impacted is an unknown function of the component FLI File Parser. This manipulation of the argument starting_line causes heap-based buffer overflow. Remote exploitation of the attack is possible. Upgrading to version 2.52.6 is recommended to address this issue. Upgrading the affected component is advised.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 22.4%
Common Weakness Enumeration
References
https://newsgroup.xnview.com/viewtopic.php?t=51359
https://vuldb.com/cve/CVE-2026-107125
https://vuldb.com/submit/993948
https://vuldb.com/vuln/414926
https://vuldb.com/vuln/414926/cti
https://www.xnview.com/en/xnview/#downloads
https://vuldb.com/submit/993948