CVE Feed

    Dashboard / CVE / CVE-2022-36947

    CVE-2022-36947

    Unsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack buffer overflow.

    Published:Aug 18, 2022
    Last Modified:Nov 21, 2024
    EPS:Aug 18, 2022
    EPSS Score:0.00805
    CVSS Score:9.8

    Affected Products

    Vendor
    Faststone
    Product
    Image Viewer
    Vendor
    Microsoft
    Product
    Windows

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-787 Out-of-bounds Write

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-30041 (CVSS 7.5) — An integer overflow in the PSD parser compnent of FastStone Image Viewer v8.3 allows attackers to execute arbi…
    CVE-2024-9114 (CVSS 7.8) — FastStone Image Viewer GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerab…
    CVE-2024-9113 (CVSS 7.8) — FastStone Image Viewer TGA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerab…
    CVE-2024-9112 (CVSS 7.8) — FastStone Image Viewer PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerab…
    CVE-2021-26237 (CVSS 7.8) — FastStone Image Viewer <= 7.5 is affected by a user mode write access violation at 0x00402d7d, triggered when …
    CVE-2021-26235 (CVSS 7.8) — FastStone Image Viewer <= 7.5 is affected by a user mode write access violation near NULL at 0x005bdfc9, trigg…
    CVE-2021-26234 (CVSS 7.8) — FastStone Image Viewer <= 7.5 is affected by a user mode write access violation at 0x00402d8a, triggered when …
    CVE-2021-26233 (CVSS 7.8) — FastStone Image Viewer <= 7.5 is affected by a user mode write access violation near NULL at 0x005bdfcb, trigg…
    CVE-2021-26236 (CVSS 7.8) — FastStone Image Viewer v.<= 7.5 is affected by a Stack-based Buffer Overflow at 0x005BDF49, affecting the CUR …
    CVE-2020-35845 (CVSS 7.8) — FastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe+0x96cf.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High