Vulnerability Spotlight: Multiple code execution vulnerabilities in Accusoft Image Gear
Summary: Cisco Talos discovered four code execution vulnerabilities in Accusoft ImageGear, a document-imaging developer toolkit, all exploitable out-of-bounds writes in the igcore19d.dll library. The flaws affect ImageGear versions 19.4, 19.5.0 and 19.6.0 and are triggered by malformed PNG, ICO or TIFF files that an attacker must provide to the victim, with fixes released through coordinated disclosure.
What's compelling: Each of these four bugs is reached by a single malformed image file, so any system that renders untrusted PNG, ICO or TIFF content through ImageGear is a code execution path until the update is applied.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2020-6075CVE-2020-6076CVE-2020-6082CVE-2020-6094
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026