XnView vulnerabilities
Published CVEs affecting XnView products: 3 record(s), with severity, exploitation and fixes.
CVE-2026-107125
Medium · 6.3
CWE-119 Oct 7, 2026
XnView Classic FLI File heap-based overflow
A flaw has been found in XnView Classic 2.52.5. Impacted is an unknown function of the component FLI File Parser. This manipulation of the argument starting_line causes heap-based buffer overflow. Remote exploitation of the attack is possible. Upgrading to version 2.52.6 is recommended to address this issue. Upgrading the affected component is advised.
CVE-2026-30007
Medium · 6.2
CWE-416 Mar 23, 2026
Use After Free in Xnview Nconvert
XnSoft NConvert 7.230 is vulnerable to Use-After-Free via a crafted .tiff file
CVE-2026-30006
Medium · 6.2
CWE-120 Mar 23, 2026
Classic Buffer Overflow in Xnview Nconvert
XnSoft NConvert 7.230 is vulnerable to Stack Buffer Overrun via a crafted .tiff file.