Vulnerability Spotlight: Code execution, memory corruption vulnerabilities in Accusoft Image Gear
Summary: Cisco Talos discovered two vulnerabilities in Accusoft ImageGear 19.7, a document-imaging developer toolkit used for image conversion, creation, and editing. One is a memory corruption flaw in TIFF handle_COMPRESSION_PACKBITS (TALOS-2020-1095/CVE-2020-6151) and the other is an out-of-bounds write enabling code execution in DICOM parse_dicom_meta_info (TALOS-2020-1096/CVE-2020-6152), both triggered by specially crafted malformed files.
Why it matters: Both flaws are triggered by a malicious file handed to a victim, so any product built on ImageGear inherits the exposure until the Accusoft update is applied; Talos published Snort rules 54411-54413 and 54390 for detection.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2020-6151CVE-2020-6152
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026