CVE-2023-35002

CVSS 3.1: 9.8 critical
EPSS: 1%p72
Published: Sep 25, 2023 · Sep 25, 2023
Modified: Jun 17, 2026

Analyze CVE-2023-35002 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A heap-based buffer overflow vulnerability exists in the pictwread functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

Vendors: accusoft

Products: imagegear

Weakness: CWE-119

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news

1 story

10 new vulnerabilities disclosed by Talos, including use-after

Cisco TalosSep 27, 16:00 UTC · Sep 27, 2023VulnerabilityCVE-2023-3421 CVE-2023-32653 CVE-2023-39453+71