CVE-2022-23400: Buffer Overflow

Published May 3, 2022

Updated

A stack-based buffer overflow vulnerability exists in the IGXMPXMLParser::parseDelimiter functionality of Accusoft ImageGear 19.10. A specially-crafted PSD file can overflow a stack buffer, which could either lead to denial of service or, depending on the application, to an information leak. An attacker can provide a malicious file to trigger this vulnerability.

Affected Software

1 affected component

Accusoft ImageGear=19.10

Event History

May 3, 2022

CVE Published

via MITRE·04:05 PM

Data Sourced

via MITRE·04:05 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2022-23400?

CVE-2022-23400 is a stack-based buffer overflow vulnerability in the IGXMPXMLParser::parseDelimiter functionality of Accusoft ImageGear 19.10.

What is the severity of CVE-2022-23400?

CVE-2022-23400 has a severity rating of 7.1, which is classified as high.

What software is affected by CVE-2022-23400?

Accusoft ImageGear 19.10 is affected by CVE-2022-23400.

How can CVE-2022-23400 be exploited?

CVE-2022-23400 can be exploited by using a specially-crafted PSD file to overflow a stack buffer, potentially leading to denial of service or information leakage.

Is there a fix available for CVE-2022-23400?

Currently, there is no information available about a fix for CVE-2022-23400. It is recommended to contact Accusoft for further guidance.