CVE-2020-23886: Xnview Mp

Medium severity, CVSS 5.5. EPSS: 1% chance of exploitation in the next 30 days.

XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service (DoS) via a crafted pict file. Related to a User Mode Write AV starting at ntdll!RtlpLowFragHeapFree.

Affected products

• Xnview Xnview Mp: up to and including 0.96.4

Published 2021-11-10. Last modified 2026-06-17.