CVE-2023-32614: Buffer Overflow

Published Sep 25, 2023

Updated

A heap-based buffer overflow vulnerability exists in the createpngobject functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.

Affected Software

1 affected component

Accusoft ImageGear=20.1

Event History

Sep 25, 2023

CVE Published

via MITRE·03:22 PM

Data Sourced

via MITRE·03:22 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-32614?

The severity of CVE-2023-32614 is critical with a CVSS score of 9.8.

What is the affected software of CVE-2023-32614?

The affected software of CVE-2023-32614 is Accusoft ImageGear 20.1.

How does CVE-2023-32614 impact the system?

CVE-2023-32614 can lead to memory corruption when a specially crafted malformed file is provided, potentially allowing an attacker to execute arbitrary code or cause a denial of service.

Are there any known exploits for CVE-2023-32614?

There are no known exploits for CVE-2023-32614 at the time of writing.

How can I mitigate the vulnerability in Accusoft ImageGear 20.1?

To mitigate the vulnerability in Accusoft ImageGear 20.1, update to the latest version or apply any patches or security fixes provided by the vendor.