← Back

Wpg

wpg

Vendor: Irfanview • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-27362
1Irfanview
1Wpg
Jun 17, 2026
Feb 17, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a Read Access Violation on Control Flow starting at WPG!ReadWPG_W+0x0000000000000133, which might allow remote attackers to execute arbitrary code.
CVE-2021-27224
1Irfanview
1Wpg
Jun 17, 2026
Feb 17, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012ec6, which might allow remote attackers to execute arbitrary code.