CVE-2020-23887: Xnview Mp

Medium severity, CVSS 5.5. EPSS: 0.7% chance of exploitation in the next 30 days.

XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service (DoS) via a crafted ico file. Related to a Read Access Violation starting at USER32!SmartStretchDIBits+0x33.

Affected products

• Xnview Xnview Mp: up to and including 0.96.4

Published 2021-11-10. Last modified 2026-06-17.