Irfanview Flashpix Plugin — known CVE vulnerabilities

Every CVE whose affected-product data names Irfanview Flashpix Plugin, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2013-3486 — CVSS 9.6 (critical): IrfanView FlashPix Plugin 4.3.4 0 has an Integer Overflow Vulnerability
• CVE-2012-0278 — CVSS 9.3 (critical): Heap-based buffer overflow in the FlashPix PlugIn before 4.3.4.0 for IrfanView might allow remote attackers to execute arbitrary code via a…
• CVE-2012-0025 — CVSS 6.8 (medium): Double free vulnerability in the Free_All_Memory function in jpeg/dectile.c in libfpx before 1.3.1-1, as used in the FlashPix PlugIn…