{"id":"CVE-2026-107125","published":"2026-10-07T15:17:18.440","lastModified":"2026-10-07T18:17:17.677","description":"A flaw has been found in XnView Classic 2.52.5. Impacted is an unknown function of the component FLI File Parser. This manipulation of the argument starting_line causes heap-based buffer overflow. Remote exploitation of the attack is possible. Upgrading to version 2.52.6 is recommended to address this issue. Upgrading the affected component is advised.","cvssScore":6.3,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cwes":["CWE-119","CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://newsgroup.xnview.com/viewtopic.php?t=51359","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-107125","tags":[]},{"url":"https://vuldb.com/submit/993948","tags":[]},{"url":"https://vuldb.com/vuln/414926","tags":[]},{"url":"https://vuldb.com/vuln/414926/cti","tags":[]},{"url":"https://www.xnview.com/en/xnview/#downloads","tags":[]},{"url":"https://vuldb.com/submit/993948","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}