CVE-2022-23400 | BDVDB-2026-175200 Detail
AccusoftImageGear
Description#
A stack-based buffer overflow vulnerability exists in the IGXMPXMLParser::parseDelimiter functionality of Accusoft ImageGear 19.10. A specially-crafted PSD file can overflow a stack buffer, which could either lead to denial of service or, depending on the application, to an information leak. An attacker can provide a malicious file to trigger this vulnerability.
Impact#
Per CVSS v3.0: confidentiality impact low, integrity impact none, availability impact high. Attack vector: network.
Weaknesses#
- CWE-193 Off-by-one Error
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.