PT-2024-10781 · Irfanview · Irfanview B3D Plugins

CVE-2020-13878

·

Published

2024-01-05

·

Updated

2025-06-17

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions IrfanView B3D PlugIns versions prior to 4.56
Description The issue is related to a heap-based out-of-bounds write in the B3d.dll module. This occurs at the B3d.dll!+27ef location, indicating a specific point of vulnerability in the code. The estimated number of potentially affected devices and details about real-world incidents where this issue was exploited are not provided.
Recommendations For versions prior to 4.56, update to version 4.56 or later to resolve the issue. As a temporary workaround, consider restricting access to the B3d.dll module to minimize the risk of exploitation.

Fix

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2020-13878

Affected Products

Irfanview B3D Plugins