CVEvulnerability
CVE-2021-26236
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-03-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-787
Description
FastStone Image Viewer v.<= 7.5 is affected by a Stack-based Buffer Overflow at 0x005BDF49, affecting the CUR file parsing functionality (BITMAPINFOHEADER Structure, 'BitCount' file format field), that will end up corrupting the Structure Exception Handler (SEH). Attackers could exploit this issue to achieve code execution when a user opens or views a malformed/specially crafted CUR file.
Affected configurations
• faststone image viewer (<= 7.5)
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://voidsec.com/advisories/cve-2021-26236-faststone-image-viewer-v-7-5-stack-based-buffer-overflow/ Exploit, Third Party Advisory
- https://voidsec.com/fuzzing-faststone-image-viewer-cve-2021-26236 Exploit, Third Party Advisory
- https://www.exploit-db.com/exploits/49660 Exploit, Third Party Advisory, VDB Entry
- https://voidsec.com/advisories/cve-2021-26236-faststone-image-viewer-v-7-5-stack-based-buffer-overflow/ Exploit, Third Party Advisory
- https://voidsec.com/fuzzing-faststone-image-viewer-cve-2021-26236 Exploit, Third Party Advisory
- https://www.exploit-db.com/exploits/49660 Exploit, Third Party Advisory, VDB Entry