CVE-2021-29361: Irfanview

High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days.

A buffer overflow vulnerability in FORMATS!Read_Utah_RLE+0x340 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.

Affected products

• Irfanview Irfanview: version 4.57 only

Published 2021-09-28. Last modified 2026-06-17.