CVE-2019-5076

An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll PNG header-parser of the Accusoft ImageGear 19.3.0 library. A specially crafted PNG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the viction to trigger the vulnerability.

Score

CVSS 3.0 9.8 Critical

Status

Modified - talos-cna@cisco.com

Published

2019-12-03

Last modified

2024-08-04

Weaknesses

CWE-787

Affected products

• Imagegear (Accusoft)

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0865