CVE-2026-101202: Faststone Image Viewer

Medium severity, CVSS 6.3. EPSS: 0.2% chance of exploitation in the next 30 days.

A flaw has been found in FastStone Image Viewer up to 8.3. The affected element is an unknown function of the component TGA Image Handler. Executing a manipulation can lead to out-of-bounds write. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

• Faststone Image Viewer: version 8.0 only; version 8.1 only; version 8.2 only; version 8.3 only

Published 2026-09-28. Last modified 2026-09-29.