CVE-2026-101203: FastStone Image Viewer 1bpp RLE Decoder out-of-bounds write
A vulnerability has been found in FastStone Image Viewer up to 8.3. The impacted element is an unknown function of the component 1bpp RLE Decoder. The manipulation leads to out-of-bounds write. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Does exploitation require attacker authentication or user interaction?
The attack vector indicates no privileges are required, but user interaction is required. The issue can be initiated remotely.
What security impact is indicated if exploitation succeeds?
The supplied severity vector rates confidentiality, integrity, and availability impact as low. The vulnerability is classified as a buffer overflow caused by an out-of-bounds write.
Which installations should be considered potentially affected?
FastStone Image Viewer versions up to and including 8.3 are identified as affected. The available information does not state whether a fixed version or mitigation is available.