9.8
Critical
CVE-2021-21795 A heap-based buffer overflow vulnerability exists in the PSD read_icc_icCurve_data functionality of Accusoft ImageGear…
Description
A heap-based buffer overflow vulnerability exists in the PSD read_icc_icCurve_data functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to an integer overflow that, in turn, leads to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Accusoft | Versions not published |
References
- talosintelligence.com talosintelligence.com
Timeline
- Published
- Last modified
Other CVEs of Accusoft
The 33 CVEs of Accusoft →
CVE-2021-21793
An out-of-bounds write vulnerability exists in the JPG sof_nb_comp header processing functionality of Accusoft ImageGear…
9.8
Critical
CVE-2021-21821
A stack-based buffer overflow vulnerability exists in the PDF process_fontname functionality of Accusoft ImageGear 19.9
9.8
Critical
CVE-2021-21807
An integer overflow vulnerability exists in the DICOM parse_dicom_meta_info functionality of Accusoft ImageGear 19.9
9.8
Critical
CVE-2021-21808
A memory corruption vulnerability exists in the PNG png_palette_process functionality of Accusoft ImageGear 19.9
8.1
High