CVE-2023-40163: Critical severity accusoft imagegear vulnerability

Published Sep 25, 2023

Updated

An out-of-bounds write vulnerability exists in the allocatebufferforjpegdecoding functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.

Affected Software

1 affected component

Accusoft ImageGear=20.1

Event History

Sep 25, 2023

CVE Published

via MITRE·03:22 PM

Data Sourced

via MITRE·03:22 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-40163?

The severity of CVE-2023-40163 is critical with a CVSS score of 9.8.

How does CVE-2023-40163 affect Accusoft ImageGear 20.1?

CVE-2023-40163 affects Accusoft ImageGear 20.1 by allowing an attacker to provide a specially crafted file that can lead to memory corruption.

What is the impact of CVE-2023-40163?

The impact of CVE-2023-40163 is an out-of-bounds write vulnerability that can result in memory corruption.

Is there a fix available for CVE-2023-40163?

Yes, a fix is available for CVE-2023-40163. It is recommended to update to the latest version of Accusoft ImageGear.

Where can I find more information about CVE-2023-40163?

More information about CVE-2023-40163 can be found at the following link: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1836