---
id: CVE-2026-121517
title: IrfanView TIFF Wang Annotation heap-based overflow
summary: >-
  A vulnerability was detected in IrfanView 4.76.0.0 on Win64. Affected by this
  vulnerability is an unknown functionality of the component TIFF Wang
  Annotation Handler. Performing a manipulation results in heap-based buffer
  overflow. The a…
severity: medium
cvss: 5
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C'
cvssSource: cna
cwe:
  - CWE-122
  - CWE-119
product: IrfanView
affected:
  - IrfanView 4.76.0.0
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-07T03:34:57.730522Z'
exploitAvailable: true
published: '2026-11-03'
updated: '2026-11-07'
sourceUpdated: '2026-11-07T03:35:18.471Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-121517'
references:
  - url: 'https://vuldb.com/vuln/430288'
    label: VDB-430288 | IrfanView TIFF Wang Annotation heap-based overflow
  - url: 'https://vuldb.com/vuln/430288/cti'
    label: 'VDB-430288 | CTI Indicators (IOB, IOC)'
  - url: 'https://vuldb.com/cve/CVE-2026-121517'
    label: CVE-2026-121517 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/1018543'
    label: 'Submit #1018543 | IrfanView 4.76.0.0 (x64) Heap-based Buffer Overflow'
  - url: 'https://github.com/dwBruijn/CVEs/blob/main/IrfanView/TIFF/Tiff_Wang.md'
  - url: 'https://www.irfanview.com/'
tags:
  - cve.org
  - exploit-available
epss: 0.00286
epssPercentile: 0.21283
ingestedAt: '2026-11-05T20:33:06.479Z'
---

## Overview

A vulnerability was detected in IrfanView 4.76.0.0 on Win64. Affected by this vulnerability is an unknown functionality of the component TIFF Wang Annotation Handler. Performing a manipulation results in heap-based buffer overflow. The attack is possible to be carried out remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit is now public and may be used. It is recommended to apply a patch to fix this issue. The vendor confirms: "[T]he TIF-Annotations option is OFF by default. Means, normal users are not affected ... the danger level for this is low".

## Affected

- `IrfanView 4.76.0.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.