CVE-2026-116463

EUVD-2026-110055
A vulnerability was identified in FastStone Image Viewer up to 8.5. Affected is the function FUN_0062d96c of the component Box-Average Downsampler Engine. The manipulation leads to out-of-bounds read. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
VulDBCNA
6.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 13.91%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
faststoneimage_viewer
8.0
CNA
faststoneimage_viewer
8.1
CNA
faststoneimage_viewer
8.2
CNA
faststoneimage_viewer
8.3
CNA
faststoneimage_viewer
8.4
CNA
faststoneimage_viewer
8.5
CNA
Common Weakness Enumeration
References
https://vuldb.com/cve/CVE-2026-116463
https://vuldb.com/submit/1013651
https://vuldb.com/vuln/426360
https://vuldb.com/vuln/426360/cti