PT-2026-125077
CVE-2026-116463
·
Published
2026-10-26
·
Updated
2026-10-26
Description by
CVSS 2.0
7.5
HighMetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
A vulnerability was identified in FastStone Image Viewer up to 8.5. Affected is the function FUN 0062d96c of the component Box-Average Downsampler Engine. The manipulation leads to out-of-bounds read. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Found an issue in the description? Have something to add? Feel free to write us 👾