Back cve.threatint.com

FastStone Image Viewer 1bpp RLE Decoder out-of-bounds writeA vulnerability ha... CVE: New / 14h A vulnerability has been found in FastStone Image Viewer up to 8.3. The impacted element is an unknown function of the component 1bpp RLE Decoder. The manipulation leads to out-of-bounds write. The...

cve.threatint.com • September 29, 2026

A vulnerability has been found in FastStone Image Viewer up to 8.3. The impacted element is an unknown function of the component 1bpp RLE Decoder. The manipulation leads to out-of-bounds write. The attack can be initiated remotely. The vendor was contacted early this disclosure but did not respond in any way.

PUBLISHED Reserved 2026-09-28 | Published 2026-09-28 | Updated 2026-09-28 | Assigner VulDB

MEDIUM: 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P MEDIUM: 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R MEDIUM: 6.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR Problem types Out-of-bounds Write Memory Corruption Product status 8.0 affected 8.1 affected 8.2 affected 8.3 affected Timeline 2026-09-28: Advisory disclosed 2026-09-28: VulDB entry created 2026-09-28: VulDB entry last update Credits jonzab (VulDB User) reporter VulDB CNA Team coordinator References vuldb.com/vuln/411012 (VDB-411012 | FastStone Image Viewer 1bpp RLE Decoder out-of-bounds write) vdb-entry vuldb.com/vuln/411012/cti (VDB-411012 | CTI Indicators (IOB, IOC)) signature permissions-required vuldb.com/cve/CVE-2026-101203 (CVE-2026-101203 | CVE Analysis and Report) third-party-advisory vuldb.com/submit/907575 (Submit #907575 | FastStone Soft FastStone Image Viewer 8.3 Heap-based buffer overflow (out-of-bounds write)) third-party-advisory cve.org (CVE-2026-101203) nvd.nist.gov (CVE-2026-101203) Download JSON

jonzab (VulDB User) reporter

VulDB CNA Team coordinator

vuldb.com/vuln/411012 (VDB-411012 | FastStone Image Viewer 1bpp RLE Decoder out-of-bounds write) vdb-entry

vuldb.com/vuln/411012/cti (VDB-411012 | CTI Indicators (IOB, IOC)) signature permissions-required

vuldb.com/cve/CVE-2026-101203 (CVE-2026-101203 | CVE Analysis and Report) third-party-advisory

vuldb.com/submit/907575 (Submit #907575 | FastStone Soft FastStone Image Viewer 8.3 Heap-based buffer overflow (out-of-bounds write)) third-party-advisory

cve.org (CVE-2026-101203)

nvd.nist.gov (CVE-2026-101203)

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Out-of-Bounds Write Vulnerability in FastStone Image Viewer A vulnerability, CVE-2026-101203, has been identified in FastStone Image Viewer versions up to 8.3, specifically in the 1bpp RLE Decoder component. This out-of-bounds write vulnerability allows remote attackers to manipulate the application by sending specially crafted image files that require user interaction to open. The attack can lead to memory corruption, potentially compromising the application's integrity and availability. The vendor has been contacted but has not responded to the disclosure. The vulnerability was published on September 28, 2026, and is rated with a CVSS score of 6.3, indicating a high risk if left unpatched. Organizations are advised to avoid opening untrusted image files and to update the application once a patch is available. Currently, there is no evidence of public proof-of-concept exploitation. The attack complexity is low, and no privileges are required for exploitation. 3 sources 55

Extracted Entities

FastStone Image Viewer 1bpp RLE Decoder out-of-bounds writeA vulnerability ha... CVE: New / 14h A vulnerability has been found in FastStone Image Viewer up to 8.3. The impacted element is an unknown function of the component 1bpp RLE Decoder. The manipulation leads to out-of-bounds write. The...

The full story

Extracted Entities

CVEs (1)

CWE Weaknesses (1)

Domains (2)

Vulnerabilities (1)