CVE-2023-28393

2023-09-2515:22:35

CWE-121

talos

raw.githubusercontent.com

cve-2023-28393

tif_processing_dng_channel_count

memory corruption

malicious file

vulnerability

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.7%

JSON

A stack-based buffer overflow vulnerability exists in the tif_processing_dng_channel_count functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.