CVE-2021-26236

FastStone Image Viewer v.<= 7.5 is affected by a Stack-based Buffer Overflow at 0x005BDF49, affecting the CUR file parsing functionality (BITMAPINFOHEADER Structure, 'BitCount' file format field), that will end up corrupting the Structure Exception Handler (SEH). Attackers could exploit this issue to achieve code execution when a user opens or views a malformed/specially crafted CUR file.

• CWE-787

• https://voidsec.com/advisories/cve-2021-26236-faststone-image-viewer-v-7-5-stack-based-buffer-overflow/Exploit, Third Party Advisory
• https://voidsec.com/fuzzing-faststone-image-viewer-cve-2021-26236Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/49660Exploit, Third Party Advisory, VDB Entry
• https://voidsec.com/advisories/cve-2021-26236-faststone-image-viewer-v-7-5-stack-based-buffer-overflow/Exploit, Third Party Advisory
• https://voidsec.com/fuzzing-faststone-image-viewer-cve-2021-26236Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/49660Exploit, Third Party Advisory, VDB Entry

Published

Mar 18, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-26230Cross-site scripting (XSS) vulnerability in SourceCodester C…6.1
• CVE-2021-26231SQL injection vulnerability in SourceCodester Fantastic Blog…9.8
• CVE-2021-26232SQL injection vulnerability in SourceCodester Simple College…9.8
• CVE-2021-26233FastStone Image Viewer <= 7.5 is affected by a user mode wri…7.8
• CVE-2021-26234FastStone Image Viewer <= 7.5 is affected by a user mode wri…7.8
• CVE-2021-26235FastStone Image Viewer <= 7.5 is affected by a user mode wri…7.8
• CVE-2021-26237FastStone Image Viewer <= 7.5 is affected by a user mode wri…7.8
• CVE-2021-26246Rejected reason: This candidate was in a CNA pool that was n…
• CVE-2021-26247As an unauthenticated remote user, visit "http://<CACTI_SERV…6.1
• CVE-2021-26248Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does n…5.5
• CVE-2021-26251Improper input validation in the Intel(R) Distribution of Op…6.5
• CVE-2021-26252A flaw was found in htmldoc in v1.9.12. Heap buffer overflow…7.8