CVE-2021-29361
IrfanView vulnerability analysis and mitigation

Overview

CVE-2021-29361 is a buffer overflow vulnerability discovered in IrfanView version 4.57, specifically in the FORMATS!Read_Utah_RLE+0x340 function. This vulnerability allows attackers to execute arbitrary code through specially crafted files (GitHub Research, NVD).

Technical details

The vulnerability is a buffer overflow condition that occurs in the FORMATS!Read_Utah_RLE+0x340 function when processing RLE (Run-Length Encoding) files in IrfanView 4.57. This vulnerability could potentially be triggered when processing specially crafted RLE files (NVD).

Impact

The successful exploitation of this vulnerability could allow attackers to execute arbitrary code on the affected system when processing maliciously crafted files (NVD).

Additional resources


SourceThis report was generated using AI

Related IrfanView vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-7325HIGH7.8
  • IrfanViewIrfanView
  • cpe:2.3:a:irfanview:irfanview
NoNoJul 21, 2025
CVE-2025-7324HIGH7.8
  • IrfanViewIrfanView
  • cpe:2.3:a:irfanview:irfanview
NoNoJul 21, 2025
CVE-2025-7323HIGH7.8
  • IrfanViewIrfanView
  • cpe:2.3:a:irfanview:irfanview
NoNoJul 21, 2025
CVE-2025-7322HIGH7.8
  • IrfanViewIrfanView
  • cpe:2.3:a:irfanview:irfanview
NoNoJul 21, 2025
CVE-2025-7321HIGH7.8
  • IrfanViewIrfanView
  • cpe:2.3:a:irfanview:irfanview
NoNoJul 21, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management