CVE-2023-32284: Buffer Overflow
First published: Mon Sep 25 2023(Updated: )
An out-of-bounds write vulnerability exists in the tiff_planar_adobe functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
Credit: talos-cna@cisco.com talos-cna@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| AccuSoft ImageGear | =20.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the CVE ID of this vulnerability?
The CVE ID of this vulnerability is CVE-2023-32284.
What is the severity level of CVE-2023-32284?
The severity level of CVE-2023-32284 is critical with a CVSS score of 9.8.
Which software is affected by CVE-2023-32284?
Accusoft ImageGear 20.1 is affected by CVE-2023-32284.
What is the description of CVE-2023-32284?
CVE-2023-32284 is an out-of-bounds write vulnerability in the tiff_planar_adobe functionality of Accusoft ImageGear 20.1, which can be triggered by a specially crafted malformed file, leading to memory corruption.
Is there any fix available for CVE-2023-32284?
At the moment, there is no information available about a fix for CVE-2023-32284. It is recommended to follow the guidance provided by the vendor or product team.
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/nvd-api
- collector/nvd-index
- vendor/accusoft
- canonical/accusoft imagegear
- version/accusoft imagegear/20.1