← Back to browse · API

CVE-2019-5187

Severity
CRITICAL
CVSS
9.8
EPSS
0.03687
Risk score
40.49
CISA KEV
No
PoC
No
Published
2020-02-14
Modified
2024-08-04
First seen
2026-08-07
Aliases
EUVD-2019-14792, GHSA-4CRH-825X-HJW2
Products
n/a:Accusoft Accusoft ImageGear 19.5.0
Sources
euvd EUVD-2019-14792

Description

An exploitable out-of-bounds write vulnerability exists in the TIFreadstripdata function of the igcore19d.dll library of Accusoft ImageGear 19.5.0. A specially crafted TIFF file file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability.

References