CVE Feed

    Dashboard / CVE / CVE-2026-116463

    CVE-2026-116463

    A vulnerability was identified in FastStone Image Viewer up to 8.5. Affected is the function FUN_0062d96c of the component Box-Average Downsampler Engine. The manipulation leads to out-of-bounds read. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.

    Published:Oct 26, 2026
    Last Modified:Oct 26, 2026
    EPS:Oct 26, 2026
    EPSS Score:
    CVSS Score:6.3

    Affected Products

    Vendor
    Faststone
    Product
    Image Viewer

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-101205 (CVSS 2.1) — A vulnerability was determined in FastStone Image Viewer up to 8.3. This impacts an unknown function of the co…
    CVE-2026-101204 (CVSS 2.1) — A vulnerability was found in FastStone Image Viewer up to 8.3. This affects an unknown function of the file FS…
    CVE-2026-101203 (CVSS 2.1) — A vulnerability has been found in FastStone Image Viewer up to 8.3. The impacted element is an unknown functio…
    CVE-2026-101202 (CVSS 2.1) — A flaw has been found in FastStone Image Viewer up to 8.3. The affected element is an unknown function of the …
    CVE-2026-30041 (CVSS 7.5) — An integer overflow in the PSD parser compnent of FastStone Image Viewer v8.3 allows attackers to execute arbi…
    CVE-2024-9114 (CVSS 7.8) — FastStone Image Viewer GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerab…
    CVE-2024-9113 (CVSS 7.8) — FastStone Image Viewer TGA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerab…
    CVE-2024-9112 (CVSS 7.8) — FastStone Image Viewer PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerab…
    CVE-2022-36947 (CVSS 9.8) — Unsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack buffer overflow.…
    CVE-2021-26237 (CVSS 7.8) — FastStone Image Viewer <= 7.5 is affected by a user mode write access violation at 0x00402d7d, triggered when …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High