Is XnViewMP affected by the brotli decoder vulnerability CVE-2026-111497?

[mle86]

Hi

I was wondering if XnViewMP is affected by CVE-2026-111497, the brotli decoder vulnerability?
XnViewMP contains a file XnViewMP\AddOn\exiftool_files\lib\auto\IO\Compress\Brotli\Brotli.xs.dll which is likely a Brotli library.
Could an attacker use a file with modified EXIF content, to leverage this, to execute code?

Best regards,
Marius

[xnview]

I was wondering if XnViewMP is affected by CVE-2026-111497, the brotli decoder vulnerability?

I'll check

XnViewMP contains a file XnViewMP\AddOn\exiftool_files\lib\auto\IO\Compress\Brotli\Brotli.xs.dll which is likely a Brotli library.
Could an attacker use a file with modified EXIF content, to leverage this, to execute code?

No i don't think, exiftool uses his own library