CVE-2026-116463: FastStone Image Viewer Box-Average Downsampler FUN_0062d96c out-of-bounds
A vulnerability was identified in FastStone Image Viewer up to 8.5. Affected is the function FUN0062d96c of the component Box-Average Downsampler Engine. The manipulation leads to out-of-bounds read. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Which installations are affected?
FastStone Image Viewer versions up to and including 8.5 are affected. The vulnerable component is the Box-Average Downsampler Engine.
What does exploitation require?
The issue can be initiated remotely and does not require privileges, but it requires user interaction. The reported flaw is an out-of-bounds read in the FUN_0062d96c function.
Is a vendor fix available?
The available information does not identify a fix. The vendor was contacted early about the disclosure but did not respond.