Approved changes feed: RSS · Atom

cpe:2.3:a:accusoft:imagegear:20.1:*:*:*:*:*:*:*

part: a version: 20.1 update: *

VendorAccusoft (b25b8d97-741d-5049-bd84-887490ec728d)
ProductImagegear (09c725a0-466e-50db-9039-e5e3b9499337)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-40163 vulnerable 2026-06-03 14:52:42.644443 Details available
CRITICAL (9.8)
An out-of-bounds write vulnerability exists in the allocate_buffer_for_jpeg_decoding functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2023-09-25T15:22:32.584Z
Updated: 2025-11-04T19:17:46.453Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39453 vulnerable 2026-06-03 14:52:39.035528 Details available
CRITICAL (9.8)
A use-after-free vulnerability exists in the tif_parse_sub_IFD functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. An attacker can deliver this file to trigger this vulnerability.
Published: 2023-09-25T15:22:33.134Z
Updated: 2025-11-04T19:17:43.196Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35002 vulnerable 2026-06-03 14:52:17.548996 Details available
CRITICAL (9.8)
A heap-based buffer overflow vulnerability exists in the pictwread functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2023-09-25T15:22:34.091Z
Updated: 2025-11-04T19:16:51.860Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32653 vulnerable 2026-06-03 14:51:59.471411 Details available
CRITICAL (9.8)
An out-of-bounds write vulnerability exists in the dcm_pixel_data_decode functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.
Published: 2023-09-25T15:22:33.625Z
Updated: 2025-11-04T19:16:25.698Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32614 vulnerable 2026-06-03 14:51:59.370881 Details available
HIGH (7)
A heap-based buffer overflow vulnerability exists in the create_png_object functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2023-09-25T15:22:34.963Z
Updated: 2025-11-04T19:16:20.226Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32284 vulnerable 2026-06-03 14:51:58.039190 Details available
HIGH (8.1)
An out-of-bounds write vulnerability exists in the tiff_planar_adobe functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2023-09-25T15:22:34.524Z
Updated: 2025-11-04T19:16:06.011Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28393 vulnerable 2026-06-03 14:51:09.077520 Details available
MEDIUM (5.6)
A stack-based buffer overflow vulnerability exists in the tif_processing_dng_channel_count functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2023-09-25T15:22:35.451Z
Updated: 2025-11-04T19:15:52.575Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23567 vulnerable 2026-06-03 14:49:27.633551 Details available
HIGH (8.1)
A heap-based buffer overflow vulnerability exists in the CreateDIBfromPict functionality of Accusoft ImageGear 20.1. A specially crafted file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2023-09-25T15:22:35.898Z
Updated: 2024-08-02T10:35:33.412Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.