CVE-2023-32284

An out-of-bounds write vulnerability exists in the tiffplanaradobe functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2023-32284

Summary: CVE-2023-32284 is an out-of-bounds write in the Accusoft ImageGear 20.1 library, specifically in the tiff_planar_adobe functionality. The flaw arises from a missing bounds check in a loop that copies raster data when bits_per_channel == 8. The loop uses max_loop, derived from image width...