CVE-2017-14540: Irfanview

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .svg file, related to "Data from Faulting Address controls Branch Selection starting at CADIMAGE+0x000000000001f23e."

Affected products

• Irfanview Irfanview: version 4.44 only

Published 2017-09-18. Last modified 2026-06-17.