CVE-2022-32588

An out-of-bounds write vulnerability exists in the PICT parsing pctwread14841 functionality of Accusoft ImageGear 20.0. A specially-crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2022-32588

Summary of CVE-2022-32588 (Accusoft ImageGear 20.0) The vulnerability exists in the PICT parsing path, specifically in the pctwread_14841 function chain. It stems from a missing minimum-size check when processing a malformed PICT file, causing an out-of-bounds heap write and memory corruption. Te...