CVE-2020-13571

Name of the Vulnerable Software and Affected Versions Accusoft ImageGear version 19.8

Description An out-of-bounds write issue exists in the SGI RLE decompression functionality. A specially crafted malformed file can lead to code execution. An attacker can provide a malicious file to trigger this issue.

Recommendations For Accusoft ImageGear version 19.8, consider avoiding the use of SGI RLE decompression functionality until a patch is available. As a temporary workaround, restrict the processing of malicious files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.