CVE-2021-21939: Buffer Overflow

Published Apr 14, 2022

Updated

A heap-based buffer overflow vulnerability exists in the XWD parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

Affected Software

1 affected component

Accusoft ImageGear=19.10

Event History

Apr 14, 2022

CVE Published

via MITRE·07:55 PM

Data Sourced

via MITRE·07:55 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2021-21939?

CVE-2021-21939 is a heap-based buffer overflow vulnerability in the XWD parser functionality of Accusoft ImageGear 19.10.

What is the severity of CVE-2021-21939?

CVE-2021-21939 has a severity score of 8.8, which is classified as critical.

How does CVE-2021-21939 affect Accusoft ImageGear?

CVE-2021-21939 allows a specially-crafted file to trigger a code execution vulnerability in Accusoft ImageGear 19.10.

How can an attacker exploit CVE-2021-21939?

An attacker can exploit CVE-2021-21939 by providing a malicious file that triggers the heap-based buffer overflow vulnerability.

Is there a fix available for CVE-2021-21939?

At the moment, there is no specific fix available for CVE-2021-21939. It is recommended to follow the recommendations provided by Accusoft or the software vendor.