Threat database

3 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.6	EPSS 0.6%	CVE-2023-28393Accusoft ImageGear · Stack-based Buffer Overflow Medium5.6EPSS 0.6%2023-09-25CVE Database V5CVE-2023-28393 A stack-based buffer overflow vulnerability exists in the tif_processing_dng_channel_count functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability. EPSS 0.6%Vulnerability Accusoft #cwe-121	CVE Database V5	2023-09-25
Critical	9.8	EPSS 1.3%	CVE-2023-39453Accusoft ImageGear · Use After Free Critical9.8EPSS 1.3%2023-09-25CVE Database V5CVE-2023-39453 A use-after-free vulnerability exists in the tif_parse_sub_IFD functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. An attacker can deliver this file to trigger this vulnerability. EPSS 1.3%Vulnerability Accusoft #cwe-416	CVE Database V5	2023-09-25
Critical	9.8	EPSS 1.1%	CVE-2023-40163Accusoft ImageGear · Out-of-bounds Write Critical9.8EPSS 1.1%2023-09-25CVE Database V5CVE-2023-40163 An out-of-bounds write vulnerability exists in the allocate_buffer_for_jpeg_decoding functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability. EPSS 1.1%Vulnerability Accusoft #cwe-787	CVE Database V5	2023-09-25

Page 1 of 1