Threat database

7 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.6	EPSS 0.6%	CVE-2023-28393Accusoft ImageGear · Stack-based Buffer Overflow Medium5.6EPSS 0.6%2023-09-25CVE Database V5CVE-2023-28393 A stack-based buffer overflow vulnerability exists in the tif_processing_dng_channel_count functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability. EPSS 0.6%Vulnerability Accusoft #cwe-121	CVE Database V5	2023-09-25
High	7.0	EPSS 0.8%	CVE-2023-32614Accusoft ImageGear · Buffer Underflow High7.0EPSS 0.8%2023-09-25CVE Database V5CVE-2023-32614 A heap-based buffer overflow vulnerability exists in the create_png_object functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability. EPSS 0.8%Vulnerability Accusoft #cwe-124	CVE Database V5	2023-09-25
High	8.1	EPSS 0.9%	CVE-2023-32284Accusoft ImageGear · Memory Buffer Overflow High8.1EPSS 0.9%2023-09-25CVE Database V5CVE-2023-32284 An out-of-bounds write vulnerability exists in the tiff_planar_adobe functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability. EPSS 0.9%Vulnerability Accusoft #cwe-119	CVE Database V5	2023-09-25
Critical	9.8	EPSS 1.4%	CVE-2023-35002Accusoft ImageGear · Memory Buffer Overflow Critical9.8EPSS 1.4%2023-09-25CVE Database V5CVE-2023-35002 A heap-based buffer overflow vulnerability exists in the pictwread functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. EPSS 1.4%Vulnerability Accusoft #cwe-119	CVE Database V5	2023-09-25
Critical	9.8	EPSS 1.1%	CVE-2023-32653Accusoft ImageGear · Integer Underflow (Wrap or Wraparound) Critical9.8EPSS 1.1%2023-09-25CVE Database V5CVE-2023-32653 An out-of-bounds write vulnerability exists in the dcm_pixel_data_decode functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability. EPSS 1.1%Vulnerability Accusoft #cwe-191	CVE Database V5	2023-09-25
Critical	9.8	EPSS 1.3%	CVE-2023-39453Accusoft ImageGear · Use After Free Critical9.8EPSS 1.3%2023-09-25CVE Database V5CVE-2023-39453 A use-after-free vulnerability exists in the tif_parse_sub_IFD functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. An attacker can deliver this file to trigger this vulnerability. EPSS 1.3%Vulnerability Accusoft #cwe-416	CVE Database V5	2023-09-25
Critical	9.8	EPSS 1.1%	CVE-2023-40163Accusoft ImageGear · Out-of-bounds Write Critical9.8EPSS 1.1%2023-09-25CVE Database V5CVE-2023-40163 An out-of-bounds write vulnerability exists in the allocate_buffer_for_jpeg_decoding functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability. EPSS 1.1%Vulnerability Accusoft #cwe-787	CVE Database V5	2023-09-25

Page 1 of 1