Skip to content
OpenAdvisories
Critical · 9.8 CVE-2020-13572 EUVD-2020-5819GHSA-pvwf-p3gj-cccj

A heap overflow vulnerability exists in the way the GIF parser decodes LZW compressed streams in Accusoft ImageGear 19.8. A specially craft…

Published Feb 10, 2021 · Updated Aug 4, 2024 · Assigned by talos

Description

A heap overflow vulnerability exists in the way the GIF parser decodes LZW compressed streams in Accusoft ImageGear 19.8. A specially crafted malformed file can trigger a heap overflow, which can result in arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
— Accusoft Accusoft ImageGear Accusoft ImageGear 19.8 —

References