← Back to browse · API

CVE-2020-6075

Severity
CRITICAL
CVSS
9.8
EPSS
0.03597
Risk score
40.46
CISA KEV
No
PoC
No
Published
2020-05-06
Modified
2024-08-04
First seen
2026-08-07
Aliases
EUVD-2020-27229, GHSA-7PWF-23G4-VH4H
Products
n/a:Accusoft Accusoft ImageGear 19.5.0
Sources
euvd EUVD-2020-27229

Description

An exploitable out-of-bounds write vulnerability exists in the store_data_buffer function of the igcore19d.dll library of Accusoft ImageGear 19.5.0. A specially crafted PNG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability.

References