CVE-2021-29366: Irfanview

High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days.

A buffer overflow vulnerability in FORMATS!GetPlugInInfo+0x2de9 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.

Affected products

• Irfanview Irfanview: version 4.57 only

Published 2021-09-28. Last modified 2026-06-17.