CVE-2020-13906: Irfanview

High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days.

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000038eb7.

Affected products

• Irfanview Irfanview: version 4.54 only

Published 2020-06-10. Last modified 2026-06-17.