CVE-2021-21833: Out-of-bounds Read

Published Jun 11, 2021

Updated

An improper array index validation vulnerability exists in the TIF IPplanarrasterunpack functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.

Affected Software

1 affected component

Accusoft ImageGear=19.9

Event History

Jun 11, 2021

CVE Published

via MITRE·04:12 PM

Data Sourced

via MITRE·04:12 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2021-21833?

CVE-2021-21833 is an improper array index validation vulnerability in the TIF IP_planar_raster_unpack function of Accusoft ImageGear 19.9.

How does CVE-2021-21833 occur?

CVE-2021-21833 occurs due to an improper array index validation in the TIF IP_planar_raster_unpack function of Accusoft ImageGear 19.9.

What is the severity of CVE-2021-21833?

CVE-2021-21833 has a severity rating of critical with a CVSS score of 9.8.

Which software is affected by CVE-2021-21833?

Accusoft ImageGear version 19.9 is affected by CVE-2021-21833.

How can CVE-2021-21833 be exploited?

CVE-2021-21833 can be exploited by providing a specially crafted malformed file to the Accusoft ImageGear software.