Vulnerability Spotlight: Two vulnerabilities in Accusoft Image Gear could lead to DoS, arbitrary free
Summary: Cisco Talos discovered two vulnerabilities in Accusoft ImageGear, a document-imaging toolkit supporting more than 100 file formats including DICOM, PDF and Microsoft Office. TALOS-2022-1465 (CVE-2022-23400) can cause a denial-of-service condition by overflowing the stack buffer, with a possible one-byte memory leak in a very specific scenario, while TALOS-2022-1449 (CVE-2022-22137) can corrupt memory and cause an arbitrary use-after-free condition.
Key Takeaway: Accusoft patched these issues and also fixed several other Talos-disclosed vulnerabilities from February that previously had no patch, and Talos confirmed version 19.10 is affected - so any deployment still on that version carries both the DoS and use-after-free exposure until updated.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2022-22137CVE-2022-23400
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026