CVE Feed

    Dashboard / CVE / CVE-2026-101204

    CVE-2026-101204

    A vulnerability was found in FastStone Image Viewer up to 8.3. This affects an unknown function of the file FSViewer.exe of the component TGA Image Handler. The manipulation results in out-of-bounds read. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.

    Published:Sep 28, 2026
    Last Modified:Oct 1, 2026
    EPS:Sep 28, 2026
    EPSS Score:0.00231
    CVSS Score:6.3

    Affected Products

    Vendor
    Faststone
    Product
    Image Viewer

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-116463 (CVSS 5.3) — A vulnerability was identified in FastStone Image Viewer up to 8.5. Affected is the function FUN_0062d96c of t…
    CVE-2026-101205 (CVSS 2.1) — A vulnerability was determined in FastStone Image Viewer up to 8.3. This impacts an unknown function of the co…
    CVE-2026-101203 (CVSS 2.1) — A vulnerability has been found in FastStone Image Viewer up to 8.3. The impacted element is an unknown functio…
    CVE-2026-101202 (CVSS 2.1) — A flaw has been found in FastStone Image Viewer up to 8.3. The affected element is an unknown function of the …
    CVE-2026-30041 (CVSS 7.5) — An integer overflow in the PSD parser compnent of FastStone Image Viewer v8.3 allows attackers to execute arbi…
    CVE-2024-9114 (CVSS 7.8) — FastStone Image Viewer GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerab…
    CVE-2024-9113 (CVSS 7.8) — FastStone Image Viewer TGA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerab…
    CVE-2024-9112 (CVSS 7.8) — FastStone Image Viewer PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerab…
    CVE-2022-36947 (CVSS 9.8) — Unsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack buffer overflow.…
    CVE-2021-26237 (CVSS 7.8) — FastStone Image Viewer <= 7.5 is affected by a user mode write access violation at 0x00402d7d, triggered when …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High