CVE-2021-29367: Irfanview

High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days.

A buffer overflow vulnerability in WPG+0x1dda of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted WPG file.

Affected products

• Irfanview Irfanview: version 4.57 only

Published 2021-09-28. Last modified 2026-06-17.