CVE-2021-21938: Buffer Overflow

Published Apr 14, 2022

Updated

A heap-based buffer overflow vulnerability exists in the Palette box parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

Affected Software

1 affected component

Accusoft ImageGear=19.10

Event History

Apr 14, 2022

CVE Published

via MITRE·07:55 PM

Data Sourced

via MITRE·07:55 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2021-21938?

CVE-2021-21938 is a heap-based buffer overflow vulnerability in the Palette box parser functionality of Accusoft ImageGear 19.10.

How severe is CVE-2021-21938?

CVE-2021-21938 has a severity rating of critical with a CVSS score of 8.8.

What software is affected by CVE-2021-21938?

Accusoft ImageGear 19.10 is affected by CVE-2021-21938.

How does CVE-2021-21938 work?

A specially-crafted file can lead to code execution, allowing an attacker to provide a malicious file to trigger this vulnerability.

Are there any references for CVE-2021-21938?

Yes, you can refer to the following links for more information on CVE-2021-21938: - http://help.accusoft.com/ImageGear/v20.0/Windows/DLL/webframe.html - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1367