CVE-2018-15175: XnView 2.45 allows remote attackers to cause a denial of service (User Mode Write AV starting at Qt5Core!QV...

Security readout for executives and security teams

This CVE concerns XnView 2.45 crashing when processing a specially crafted RLE image file. The documented business impact is denial of service to the application. The sources also say “possibly unspecified other impact,” but do not define that impact or provide severity scoring. Likely exposure is endpoints where XnView 2.45 is installed and users or workflows open RLE files from untrusted sources. Broader exposure is unclear because the bundle does not enumerate affected platforms, CPEs, or deployment contexts. Treat this as a targeted availability risk unless vendor guidance shows broader impact. Prioritize environments where staff open externally supplied images, especially support, investigations, media, or intake teams. Mitigation focus: Identify systems running XnView 2.45.; Check vendor guidance or release notes for fixed versions.; Avoid opening untrusted RLE files in XnView..

Prepared

Jun 7, 2026, 05:54 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.