CVE-2022-22137

Name of the Vulnerable Software and Affected Versions Accusoft ImageGear version 19.10

Description A memory corruption issue exists in the ioca mys rgb allocate functionality. This can be triggered by a specially-crafted malformed file, leading to an arbitrary free. An attacker can exploit this by providing a malicious file.

Recommendations For Accusoft ImageGear version 19.10, consider avoiding the use of the ioca mys rgb allocate functionality until a patch is available. As a temporary workaround, restrict the handling of malformed files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.