Vulnerability Spotlight: Remote code execution vulnerabilities in LEADTOOLS 20

Summary: Cisco Talos discovered a remote code execution vulnerability in the ANI file format parser of LEADTOOLS 20, a toolkit line from LEAD Technologies used to build applications for medical systems. A specially crafted ANI file triggers a buffer overflow that allows remote code execution, and Talos worked with LEAD Technologies under its coordinated disclosure policy to resolve the issue and make an update available.
Bottom line: The vulnerable parser sits in imaging toolkits aimed at medical systems, so a single malicious ANI file is the entire attack path into applications built on LEADTOOLS 20.

Read the original at Cisco Talos ↗

Topics: Cloud Security
Related: Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs Cyber Risks · Nov 12, 2026
New Falcon Cloud Security Innovations Secure the Cloud AI Runs On Cyber Risks · Nov 04, 2026
Cloud-Native Security in 2025: Why Runtime Visibility Must Take Center Stage Cyber Risks ·