CVE-2021-28835

Name of the Vulnerable Software and Affected Versions XNView versions prior to 2.50

Description The issue allows local attackers to execute arbitrary code via crafted GEM bitmap files. This is a Buffer Overflow vulnerability.

Recommendations For versions prior to 2.50, update to version 2.50 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted GEM bitmap files until a patch is applied. Restrict access to the GEM bitmap file handling functionality to minimize the risk of exploitation.