Live › vulnerability › CVE-2026-116463
Go to dashboardFastStone Image Viewer up to version 8.5 has an out-of-bounds read in its Box-Average Downsampler component, reached through function FUN_0062d96c. The sources say an attacker can trigger it remotely by manipulating the input, which may leak memory contents.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 18:31 UTC. All times on this page are UTC.
Organisations that run FastStone Image Viewer version 8.5 or earlier on machines where it opens images from untrusted sources. The sources do not describe a server-side deployment or a default configuration that makes it more exposed. The vendor did not respond to disclosure, so no patch is confirmed.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was identified in FastStone Image Viewer up to 8.5. Affected is the function FUN_0062d96c of the component Box-Average Downsampler Engine. The manipulation leads to out-of-bounds read. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.
This page as .md · .json · in your agent: get_signal("CVE-2026-116463")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.