CVE-2020-13878: Irfanview b3d

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

IrfanView B3D PlugIns before version 4.56 has a B3d.dll!+27ef heap-based out-of-bounds write.

Affected products

• Irfanview b3d: before 4.56 (fixed in 4.56)

Published 2024-01-05. Last modified 2026-06-17.