CVE-2023-39453

CVSS 3.1: 9.8 critical
EPSS: 1%p70
Published: Sep 25, 2023 · Sep 25, 2023
Modified: Jun 17, 2026

Analyze CVE-2023-39453 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A use-after-free vulnerability exists in the tif_parse_sub_IFD functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. An attacker can deliver this file to trigger this vulnerability.

Vendors: accusoft

Products: imagegear

Weakness: CWE-416

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news

1 story

10 new vulnerabilities disclosed by Talos, including use-after

Cisco TalosSep 27, 16:00 UTC · Sep 27, 2023VulnerabilityCVE-2023-3421 CVE-2023-32653 CVE-2023-39453+71