CVE-2021-28427: Xnview

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Buffer Overflow vulnerability in XNView version 2.49.3, allows local attackers to execute arbitrary code via crafted TIFF file.

Affected products

• Xnview Xnview: version 2.49.3 only

Published 2023-08-11. Last modified 2026-06-17.