CVE-2021-21808: Buffer Overflow

Published Jun 11, 2021

Updated

A memory corruption vulnerability exists in the PNG pngpaletteprocess functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide malicious inputs to trigger this vulnerability.

Affected Software

1 affected component

Accusoft ImageGear=19.9

Event History

Jun 11, 2021

CVE Published

via MITRE·04:15 PM

Data Sourced

via MITRE·04:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2021-21808?

The severity of CVE-2021-21808 is high with a score of 8.8.

What is the description of CVE-2021-21808?

CVE-2021-21808 is a memory corruption vulnerability in the PNG png_palette_process functionality of Accusoft ImageGear 19.9. It can lead to a heap buffer overflow when a specially crafted malformed file is provided as input.

Which software is affected by CVE-2021-21808?

Accusoft ImageGear version 19.9 is affected by CVE-2021-21808.

How can CVE-2021-21808 be triggered?

CVE-2021-21808 can be triggered by providing a specially crafted malformed file as input.

Is there a patch available for CVE-2021-21808?

Currently, there is no information available about a patch for CVE-2021-21808. It is recommended to follow the vendor's advisory for updates and patches.