CVE-2021-21914: Integer Overflow

Published Apr 14, 2022

Updated

A heap-based buffer overflow vulnerability exists in the DecoderStream::Append functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

Affected Software

1 affected component

Accusoft ImageGear=19.10

Event History

Apr 14, 2022

CVE Published

via MITRE·07:55 PM

Data Sourced

via MITRE·07:55 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2021-21914?

CVE-2021-21914 is a heap-based buffer overflow vulnerability in the Accusoft ImageGear 19.10 software.

How severe is CVE-2021-21914?

CVE-2021-21914 has a severity rating of 8.8 (critical).

What is the affected software?

Accusoft ImageGear 19.10 is the affected software for CVE-2021-21914.

How can CVE-2021-21914 be exploited?

An attacker can provide a specially-crafted file to trigger the heap-based buffer overflow vulnerability in Accusoft ImageGear 19.10, potentially leading to code execution.

Is there a fix for CVE-2021-21914?

Accusoft ImageGear users should update to the latest version or apply the necessary patches to mitigate the vulnerability.