CVE-2026-107125
MEDIUM
NVD
CVSS Score
6.3
Severity
MEDIUM
Published
Oct 07, 2026
Vendor
unknown
Description
A flaw has been found in XnView Classic 2.52.5. Impacted is an unknown function of the component FLI File Parser. This manipulation of the argument starting_line causes heap-based buffer overflow. Remote exploitation of the attack is possible. Upgrading to version 2.52.6 is recommended to address this issue. Upgrading the affected component is advised.