CVE-2023-32284

An out-of-bounds write vulnerability exists in the tiffplanaradobe functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2023-35002

CVE-2023-35002 affects Accusoft ImageGear 20.1, with a heap-based buffer overflow in the pictwread functionality that can lead to arbitrary code execution via a specially crafted file. Reports in multiple sources (NVD/Red Hat/CVE listings) confirm the vulnerability in the 20.1 release. The connec...

CVE-2023-35002

A heap-based buffer overflow vulnerability exists in the pictwread functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2023-32614

Mode C: TALOS reports a heap-based buffer overflow in Accusoft ImageGear 20.1, specifically in the create_png_object path used to process PNGs. The root cause is an invalid memory/size handling during raster processing of PNG IHDR-width-derived data, leading to memory corruption when a malformed ...

CVE-2023-32614

A heap-based buffer overflow vulnerability exists in the createpngobject functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2023-32284

An out-of-bounds write vulnerability exists in the tiffplanaradobe functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2023-35002

A heap-based buffer overflow vulnerability exists in the pictwread functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2023-32284

Summary: CVE-2023-32284 is an out-of-bounds write in the Accusoft ImageGear 20.1 library, specifically in the tiff_planar_adobe functionality. The flaw arises from a missing bounds check in a loop that copies raster data when bits_per_channel == 8. The loop uses max_loop, derived from image width...

CVE-2023-39453

The CVE-2023-39453 entry details a use-after-free in Accusoft ImageGear 20.1’s tif_parse_sub_IFD handling, where recursion frees the same IFD buffer multiple times, leading to an access violation and arbitrary code execution in the affected path. The Talos report confirms a real vulnerability wit...

CVE-2023-32653

An out-of-bounds write vulnerability exists in the dcmpixeldatadecode functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...

CVE-2023-32653

An out-of-bounds write vulnerability exists in the dcmpixeldatadecode functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...

CVE-2023-39453

A use-after-free vulnerability exists in the tifparsesubIFD functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. An attacker can deliver this file to trigger this vulnerability...

CVE-2023-32653

CVE-2023-32653 is an out-of-bounds write vulnerability in Accusoft ImageGear 20.1, specifically in the dcm_pixel_data_decode function. A specially crafted malformed file can trigger an arbitrary code execution when opened by the victim. Talos reports the vulnerable version as ImageGear 20.1, and ...

CVE-2023-40163

Accusoft ImageGear 20.1 is affected by an out-of-bounds write in allocate_buffer_for_jpeg_decoding, caused by a missing buffer size check that can make size_malloc become null, yielding a too-small heap allocation and memory corruption when writing to buffer_1. Talos details confirm the vulnerabl...

CVE-2023-40163

An out-of-bounds write vulnerability exists in the allocatebufferforjpegdecoding functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

Accusoft ImageGear tiff_planar_adobe out-of-bounds write vulnerability

Talos Vulnerability Report TALOS-2023-1750 Accusoft ImageGear tiffplanaradobe out-of-bounds write vulnerability September 25, 2023 CVE Number CVE-2023-32284 SUMMARY An out-of-bounds write vulnerability exists in the tiffplanaradobe functionality of Accusoft ImageGear 20.1. A specially crafted...

Accusoft ImageGear pictwread heap-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2023-1760 Accusoft ImageGear pictwread heap-based buffer overflow vulnerability September 25, 2023 CVE Number CVE-2023-35002 SUMMARY A heap-based buffer overflow vulnerability exists in the pictwread functionality of Accusoft ImageGear 20.1. A specially crafted...

Accusoft ImageGear Buffer Error Vulnerability

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft Corporation. A buffer error vulnerability exists in Accusoft ImageGear version 20.1, which stems from a specially crafted, incorrectly formatted file that may result in memory corruption...

Accusoft ImageGear Resource Management Error Vulnerability

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft Corporation. A resource management error vulnerability exists in Accusoft ImageGear version 20.1, which stems from a specially crafted, incorrectly formatted file that could lead to arbitrary code execution...

Accusoft ImageGear Buffer Error Vulnerability

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft Corporation, USA. A security vulnerability exists in Accusoft ImageGear version 20.1, which stems from a specially crafted, incorrectly formatted file that may result in memory corruption...