CVE-2021-21782: Critical severity accusoft imagegear vulnerability

Published Mar 31, 2021

Updated

An out-of-bounds write vulnerability exists in the SGI format buffer size processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.

Affected Software

1 affected component

Accusoft ImageGear=19.8

Event History

Mar 31, 2021

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2021-21782?

CVE-2021-21782 is an out-of-bounds write vulnerability in the SGI format buffer size processing functionality of Accusoft ImageGear 19.8.

What is the severity of CVE-2021-21782?

The severity of CVE-2021-21782 is critical, with a severity value of 8.8.

How does CVE-2021-21782 occur?

CVE-2021-21782 occurs when a specially crafted malformed file is processed by Accusoft ImageGear 19.8, leading to memory corruption.

How can CVE-2021-21782 be exploited?

CVE-2021-21782 can be exploited by providing a malicious file to trigger the vulnerability.

Is there a fix for CVE-2021-21782?

At the moment, there is no known fix for CVE-2021-21782. It is recommended to follow the guidance provided by Accusoft or the software vendor to mitigate the risk.