Vulnerability Spotlight: Accusoft Image Gear PNG IHDR width code execution vulnerability
Summary: Cisco Talos discovered multiple out-of-bounds write vulnerabilities in Accusoft ImageGear 19.3.0, including the PNG IHDR width flaw tracked as TALOS-2019-0865/CVE-2019-5076 in the igcore19d.dll PNG header-parser. A specially crafted PNG, TIFF, GEM, or BMP file can trigger the write and result in remote code execution, and the attacker must provide a malformed file to the victim to exploit it.
Why it matters: ImageGear is a developer toolkit embedded in other vendors' document and imaging applications, so a single malformed image file can carry code execution into products whose users never chose the library themselves.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2019-5076CVE-2019-5132CVE-2019-5133
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026