Vulnerability Spotlight: Multiple Vulnerabilities in ACD Systems Canvas Draw 4
Summary: Cisco Talos disclosed several vulnerabilities in ACD Systems Canvas Draw 4, a graphics editing tool for Macs, found by Talos researcher Tyler Bohan. The flaws arise in parsing compressed and tiled TIFF images (including the Adobe Deflate compression scheme and crafted resolution tags) and PCX images, where error-checking gaps let user-controlled data trigger out-of-bounds writes and an invalid object being freed.
Bottom line: The vulnerable component is the handling of TIFF and PCX files, formats common to graphics work, so a malformed image is the attack path into an application with a large user base. Talos's own guidance is to update to the latest version as soon as possible.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026