CVE-2026-121517— IrfanView TIFF Wang Annotation heap-based overflow

Quick assessment

Affected

n/a IrfanView

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 IrfanView 4.76.0.0（Win64 版本）中发现了一个安全漏洞。该漏洞影响的是 TIFF Wang 注释处理程序（TIFF Wang Annotation Handler）中一个未知的功能。对恶意构造的数据进行解析操作会导致基于堆的缓冲区溢出。该攻击理论上可远程实施，但攻击复杂度较高，实际利用难度较大。目前该漏洞的利用代码已公开，可能被攻击者使用。建议尽快应用官方补丁以修复此问题。厂商已确认：“TIF-注释选项默认处于关闭状态，因此普通用户不受影响……该漏洞的危险等级较低。”

CVSS 5.0 · Medium Updated Nov 04, 2026

Possible ATT&CK Techniques 2 AI

T1203 · Exploitation for Client Execution T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

IrfanView TIFF Wang Annotation heap-based overflow

Source: CVE Program / CVE List V5

Vulnerability Description

A vulnerability was detected in IrfanView 4.76.0.0 on Win64. Affected by this vulnerability is an unknown functionality of the component TIFF Wang Annotation Handler. Performing a manipulation results in heap-based buffer overflow. The attack is possible to be carried out remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit is now public and may be used. It is recommended to apply a patch to fix this issue. The vendor confirms: "[T]he TIF-Annotations option is OFF by default. Means, normal users are not affected ... the danger level for this is low".

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

Source: CVE Program / CVE List V5

Vulnerability Type

堆缓冲区溢出

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	IrfanView	4.76.0.0	`cpe:2.3:a:irfanview:irfanview::::::::`

II. Public POCs for CVE-2026-121517

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-121517

请登录查看更多情报信息。

Other References for CVE-2026-121517 (6)

https://github.com/dwBruijn/CVEs/blob/main/IrfanView/TIFF/Tiff_Wang.md exploit
https://www.irfanview.com/ product
https://vuldb.com/vuln/430288/cti signature permissions-required
https://vuldb.com/cve/CVE-2026-121517 third-party-advisory
https://vuldb.com/vuln/430288 vdb-entry
https://vuldb.com/submit/1018543 third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-121517

Same Patch Batch · n/a · 2026-11-03 · 9 CVEs total

CVE-2026-106991	7.1 HIGH	HustOJ 24.09.10-26.08.19 任意用户操作漏洞
CVE-2026-121582	6.5 MEDIUM	Umami Record API Endpoint route.ts authorization
CVE-2026-121531	6.3 MEDIUM	Umami 2FA Policy route.ts single-factor authentication
CVE-2026-121509	5.3 MEDIUM	Headless CMS Plugin REST API post get_required_post_data information disclosure
CVE-2026-121581	4.3 MEDIUM	ArcReel Provider Test-Connection Endpoint test server-side request forgery
CVE-2026-38595		im3x Scriptables v2-dev 任意文件上传命令注入漏洞
CVE-2026-38600		codeskyblue gohttpserver v1.3.0 存在 Zip Slip 漏洞
CVE-2026-38601		codeskyblue v1.3.0 硬编码密钥导致身份伪造漏洞

IV. Related Vulnerabilities

Same product: IrfanView

Same vendor: n/a

Same weakness: CWE-122