CVE-2023-32614: Buffer Overflow
First published: Mon Sep 25 2023(Updated: )
A heap-based buffer overflow vulnerability exists in the create_png_object functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
Credit: talos-cna@cisco.com talos-cna@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| AccuSoft ImageGear | =20.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2023-32614?
The severity of CVE-2023-32614 is critical with a CVSS score of 9.8.
What is the affected software of CVE-2023-32614?
The affected software of CVE-2023-32614 is Accusoft ImageGear 20.1.
How does CVE-2023-32614 impact the system?
CVE-2023-32614 can lead to memory corruption when a specially crafted malformed file is provided, potentially allowing an attacker to execute arbitrary code or cause a denial of service.
Are there any known exploits for CVE-2023-32614?
There are no known exploits for CVE-2023-32614 at the time of writing.
How can I mitigate the vulnerability in Accusoft ImageGear 20.1?
To mitigate the vulnerability in Accusoft ImageGear 20.1, update to the latest version or apply any patches or security fixes provided by the vendor.
- collector/nvd-api
- collector/nvd-index
- agent/weakness
- agent/type
- agent/references
- agent/severity
- agent/author
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/accusoft
- canonical/accusoft imagegear
- version/accusoft imagegear/20.1