medium5.6
CVE-2023-28393
A stack-based buffer overflow vulnerability exists in the tif_processing_dng_channel_count functionality of Accusoft ImageGear 20.1.
Impact
A stack-based buffer overflow vulnerability exists in the tif_processing_dng_channel_count functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Accusoft | Imagegear | Version 20.1 |