Threats affecting pkg:github/irfanview/irfanview

CVE-2026-121517 is a heap-based buffer overflow vulnerability in IrfanView 4.76.0.0 on Win64, specifically in the TIFF Wang Annotation Handler component. The vulnerability can be triggered remotely but requires high attack complexity and is difficult to exploit. The vendor notes that the TIF-Annotations option is off by default, reducing exposure for normal users and classifying the danger level as low. Public exploit code exists, but no widespread exploitation is reported. The CVSS 4.0 score is 2.3, indicating low severity.