CVE-2021-28835: Xnview

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Buffer Overflow vulnerability in XNView before 2.50, allows local attackers to execute arbitrary code via crafted GEM bitmap file.

Affected products

• Xnview Xnview: before 2.50 (fixed in 2.50)

Published 2023-08-11. Last modified 2026-06-17.