Vulnerability Spotlight: Issue in Accusoft Image Gear could lead to memory corruption, code execution
Summary: Cisco Talos discovered a use-after-free vulnerability, TALOS-2022-1526 (CVE-2022-29465), in Accusoft ImageGear's PSD header processing function that an attacker can trigger by tricking a user into opening a malformed .psd file. The flaw leads to out-of-bounds heap writes, causing memory corruption and possibly code execution, and Talos confirmed version 19.10 is affected while Accusoft released a patch.
What you should know: ImageGear is a developer toolkit supporting more than 100 file formats including DICOM, PDF and Microsoft Office, so a single malformed .psd file can reach memory corruption and potential code execution in any product built on the library - and Talos notes its detection rules 60228 and 60229 may change as more vulnerability information emerges.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2022-29465
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026