CVE-2026-101204: FastStone Image Viewer TGA Image FSViewer.exe out-of-bounds
A vulnerability was found in FastStone Image Viewer up to 8.3. This affects an unknown function of the file FSViewer.exe of the component TGA Image Handler. The manipulation results in out-of-bounds read. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Which installations are affected?
FastStone Image Viewer versions up to and including 8.3 are identified as affected. The issue is in FSViewer.exe's TGA Image Handler.
What does exploitation require?
An attacker can launch the attack remotely, but user interaction is required according to the supplied severity vector. No privileges are required.
What is the potential impact?
Successful exploitation can cause an out-of-bounds read and is rated as having low confidentiality, integrity, and availability impact.
Is a vendor fix available?
The available information does not identify a fix. It states that the vendor was contacted early but did not respond.