CVE-2026-30007 - XnSoft NConvert 7.230 is vulnerable to Use-After-Free via a crafted .tiff file

MEDIUM

XnSoft NConvert 7.230 is vulnerable to Use-After-Free via a crafted .tiff file

Published Mar 23, 2026

6.2

MEDIUM

CVSS 3.1

EPSS 0.17%

XnSoft NConvert 7.230 is vulnerable to Use-After-Free via a crafted .tiff file

No remediation recorded yet.

Weaknesses (1)

CWE-416

Use After Free

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-14469		Advisory
https://github.com/PassMoon/Nconvert_Vul_7.230		ExploitThird Party Advisory
https://www.xnview.com/en/nconvert/		Product

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Mar 23, 2026

Updated Mar 23, 2026

Reserved Mar 4, 2026

Updated Mar 23, 2026

Status Analyzed

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Mar 23, 2026

Updated Mar 23, 2026

Exploited since n/a