CVE-2022-23400CWE-193

A stack-based buffer overflow vulnerability exists in the IGXMPXMLParser::parseDelimiter functionality of Accusoft ImageGear 19.10

High · published May 3, 2022

CVSS v3.0
7.1
EPSS
1%
Percentile
56.2
In the wild
Unconfirmed
What it is

A stack-based buffer overflow vulnerability exists in the IGXMPXMLParser::parseDelimiter functionality of Accusoft ImageGear 19.10. A specially-crafted PSD file can overflow a stack buffer, which could either lead to denial of service or, depending on the application, to an information leak. An attacker can provide a malicious file to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
7.1 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00802 · 56.2th percentile
Weakness
CWE-193 · Off-by-one Error
Published
2022-05-03T16:05Z
EPSS history
Timeline
  • 03 MAY 16:05Z
    A stack-based buffer overflow vulnerability exists in the IGXMPXMLParser::parseDelimiter functionality of Accusoft ImageGear 19.10
    cvelistv5