CVE-2020-13572CWE-122

A heap overflow vulnerability exists in the way the GIF parser decodes LZW compressed streams in Accusoft ImageGear 19.8

Critical · published February 10, 2021

CVSS v3.0
9.8
EPSS
2%
Percentile
79.7
In the wild
Unconfirmed
What it is

A heap overflow vulnerability exists in the way the GIF parser decodes LZW compressed streams in Accusoft ImageGear 19.8. A specially crafted malformed file can trigger a heap overflow, which can result in arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
9.8 · CRITICAL
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01917 · 79.7th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2021-02-10T21:45Z
EPSS history
Timeline
  • 10 FEB 21:45Z
    A heap overflow vulnerability exists in the way the GIF parser decodes LZW compressed streams in Accusoft ImageGear 19.8
    cvelistv5