AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2009-2118

MEDIUM · CVSS 6.8 EPSS 2.51%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-06-18 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2009-2118
Severity
MEDIUM
CVSS
6.8
EPSS
2.51%

Original NVD Description

Integer overflow in IrfanView 4.23, when the resampling or screen fitting option is enabled, allows remote attackers to execute arbitrary code via a crafted TIFF 1 BPP image, which triggers a heap-based buffer overflow.