Is CVE-2026-107125 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-107125?

CVE-2026-107125 has a CVSS v3 severity of MEDIUM (6.3).

Back

CVE-2026-107125

Description

A flaw has been found in XnView Classic 2.52.5. Impacted is an unknown function of the component FLI File Parser. This manipulation of the argument starting_line causes heap-based buffer overflow. Remote exploitation of the attack is possible. Upgrading to version 2.52.6 is recommended to address this issue. Upgrading the affected component is advised.