CVE-2026-30007

XnSoft NConvert 7.230 is vulnerable to Use-After-Free via a crafted .tiff file

Score

CVSS 3.1 6.2 Medium

Status

Analyzed - cve@mitre.org

Published

2026-03-23

Last modified

2026-03-23

Weaknesses

CWE-416

Affected products

• Nconvert (Xnview)

References

• https://github.com/PassMoon/Nconvert_Vul_7.230
• https://www.xnview.com/en/nconvert/