Vulnerability Spotlight: Accusoft Image Gear vulnerabilities could lead to code execution
Summary: Cisco Talos researchers Marcin Towalski and Emmanuel Tacheau found multiple out-of-bounds write and heap overflow vulnerabilities in Accusoft ImageGear 19.8, a document-imaging developer toolkit, in its TIFF parser, SGI RLE decompression, GIF LZW decoder and PSD header processing. Each is triggered by a specially crafted malformed file and can lead to code execution, and Accusoft has released an update under Cisco's coordinated disclosure policy.
Key Takeaway: ImageGear is a library developers embed in their own applications, so the vulnerable parsing code ships inside products you may already run - and a single malformed image file is enough to trigger code execution.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2020-13561CVE-2020-13571CVE-2020-13572CVE-2020-13585
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026