CVE-2023-28393

A stack-based buffer overflow vulnerability exists in the tifprocessingdngchannelcount functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2023-23567

Accusoft ImageGear 20.1 is affected by CVE-2023-23567 in the CreateDIBfromPict functionality. Talos reports a heap-based buffer overflow caused by a mis-sized heap buffer when processing DirectBitsRect/PICt data, allowing potential arbitrary code execution via a specially crafted file. The vulner...

CVE-2023-32284

An out-of-bounds write vulnerability exists in the tiffplanaradobe functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2023-32614

A heap-based buffer overflow vulnerability exists in the createpngobject functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2023-32284

An out-of-bounds write vulnerability exists in the tiffplanaradobe functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2023-32614

Mode C: TALOS reports a heap-based buffer overflow in Accusoft ImageGear 20.1, specifically in the create_png_object path used to process PNGs. The root cause is an invalid memory/size handling during raster processing of PNG IHDR-width-derived data, leading to memory corruption when a malformed ...

CVE-2023-32284

Summary: CVE-2023-32284 is an out-of-bounds write in the Accusoft ImageGear 20.1 library, specifically in the tiff_planar_adobe functionality. The flaw arises from a missing bounds check in a loop that copies raster data when bits_per_channel == 8. The loop uses max_loop, derived from image width...

CVE-2023-35002

CVE-2023-35002 affects Accusoft ImageGear 20.1, with a heap-based buffer overflow in the pictwread functionality that can lead to arbitrary code execution via a specially crafted file. Reports in multiple sources (NVD/Red Hat/CVE listings) confirm the vulnerability in the 20.1 release. The connec...

CVE-2023-35002

A heap-based buffer overflow vulnerability exists in the pictwread functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2023-35002

A heap-based buffer overflow vulnerability exists in the pictwread functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2023-32653

CVE-2023-32653 is an out-of-bounds write vulnerability in Accusoft ImageGear 20.1, specifically in the dcm_pixel_data_decode function. A specially crafted malformed file can trigger an arbitrary code execution when opened by the victim. Talos reports the vulnerable version as ImageGear 20.1, and ...

CVE-2023-39453

A use-after-free vulnerability exists in the tifparsesubIFD functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. An attacker can deliver this file to trigger this vulnerability...

CVE-2023-32653

An out-of-bounds write vulnerability exists in the dcmpixeldatadecode functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...

CVE-2023-32653

An out-of-bounds write vulnerability exists in the dcmpixeldatadecode functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...

CVE-2023-39453

The CVE-2023-39453 entry details a use-after-free in Accusoft ImageGear 20.1’s tif_parse_sub_IFD handling, where recursion frees the same IFD buffer multiple times, leading to an access violation and arbitrary code execution in the affected path. The Talos report confirms a real vulnerability wit...

CVE-2023-40163

An out-of-bounds write vulnerability exists in the allocatebufferforjpegdecoding functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2023-40163

Accusoft ImageGear 20.1 is affected by an out-of-bounds write in allocate_buffer_for_jpeg_decoding, caused by a missing buffer size check that can make size_malloc become null, yielding a too-small heap allocation and memory corruption when writing to buffer_1. Talos details confirm the vulnerabl...

Accusoft ImageGear Buffer Error Vulnerability

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft Corporation. A buffer error vulnerability exists in Accusoft ImageGear version 20.1, which stems from a specially crafted, incorrectly formatted file that could lead to arbitrary code execution...

PT-2023-27299 · Accusoft · Accusoft Imagegear

Name of the Vulnerable Software and Affected Versions: Accusoft ImageGear version 20.1 Description: An out-of-bounds write issue exists in the allocate buffer for jpeg decoding functionality. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious fil...

CVE-2023-32614: Buffer Underwrite

A heap-based buffer overflow vulnerability exists in the createpngobject functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...