{"id":"CVE-2026-116463","title":"FastStone Image Viewer Box-Average Downsampler FUN_0062d96c out-of-bounds","summary":"A vulnerability was identified in FastStone Image Viewer up to 8.5. Affected is the function FUN_0062d96c of the component Box-Average Downsampler Engine. The manipulation leads to out-of-bounds read. It is possible to initiate the attac…","severity":"medium","cvss":6.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R","cvssSource":"cna","cwe":["CWE-125","CWE-119"],"vendor":"FastStone","product":"Image Viewer","affected":["image_viewer 8.0","image_viewer 8.1","image_viewer 8.2","image_viewer 8.3","image_viewer 8.4","image_viewer 8.5"],"published":"2026-10-26","updated":"2026-10-26","sourceUpdated":"2026-10-26T18:00:15.404Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-116463","references":[{"url":"https://vuldb.com/vuln/426360","label":"VDB-426360 | FastStone Image Viewer Box-Average Downsampler FUN_0062d96c out-of-bounds"},{"url":"https://vuldb.com/vuln/426360/cti","label":"VDB-426360 | CTI Indicators (IOB, IOC, IOA)"},{"url":"https://vuldb.com/cve/CVE-2026-116463","label":"CVE-2026-116463 | CVE Analysis and Report"},{"url":"https://vuldb.com/submit/1013651","label":"Submit #1013651 | FastStone Image Viewer 8.5 Out-of-Bounds Read"}],"tags":["cve.org"],"ingestedAt":"2026-10-26T18:35:51.541Z","epss":0.00231,"epssPercentile":0.13909,"slug":"CVE-2026-116463","body":"## Overview\n\nA vulnerability was identified in FastStone Image Viewer up to 8.5. Affected is the function FUN_0062d96c of the component Box-Average Downsampler Engine. The manipulation leads to out-of-bounds read. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.\n\n## Affected\n\n- `image_viewer 8.0`\n- `image_viewer 8.1`\n- `image_viewer 8.2`\n- `image_viewer 8.3`\n- `image_viewer 8.4`\n- `image_viewer 8.5`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":35,"depthScoreParts":{"impact":34.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}