CVE-2021-21795: Buffer Overflow

Published Jun 11, 2021

Updated

A heap-based buffer overflow vulnerability exists in the PSD readiccicCurvedata functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to an integer overflow that, in turn, leads to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

Affected Software

1 affected component

Accusoft ImageGear=19.9

Event History

Jun 11, 2021

CVE Published

via MITRE·04:17 PM

Data Sourced

via MITRE·04:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2021-21795?

CVE-2021-21795 is a heap-based buffer overflow vulnerability in the PSD read_icc_icCurve_data functionality of Accusoft ImageGear 19.9.

How severe is CVE-2021-21795?

CVE-2021-21795 has a severity rating of 9.8, which is considered critical.

What software is affected by CVE-2021-21795?

Accusoft ImageGear 19.9 is affected by CVE-2021-21795.

How can an attacker exploit CVE-2021-21795?

An attacker can exploit CVE-2021-21795 by providing a specially crafted malformed file, triggering an integer overflow and leading to a heap buffer overflow.

Is there a fix available for CVE-2021-21795?

Currently, no specific fix information is available for CVE-2021-21795. It is recommended to follow the guidance provided by the vendor or security advisories.