formats vulnerabilities and fixes

Recent CVEs affecting formats, with upgrade or downgrade steps. 4 tracked.

formats has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2024-11-22. Highest priority: CVE-2024-5877 (score 38/100).

• CVE-2024-5877 HIGH 7.8 UPGRADE IrfanView PIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• CVE-2024-5876 HIGH 7.8 UPGRADE IrfanView PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
• CVE-2024-5875 HIGH 7.8 UPGRADE IrfanView SHP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
• CVE-2024-5874 HIGH 7.8 UPGRADE IrfanView PNT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

FAQ

How do I fix formats vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is formats being exploited right now?

None of the tracked formats CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which formats CVE should I patch first?

CVE-2024-5877 currently ranks highest (38/100): IrfanView PIC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

RSS feed for formats · ← Back to latest CVEs