CVE-2021-21944: Buffer Overflow

Published Apr 14, 2022

Updated

Two heap-based buffer overflow vulnerabilities exist in the TIFF parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger these vulnerabilities.This heap-based buffer oveflow takes place trying to copy the first 12 bits from local variable.

Affected Software

1 affected component

Accusoft ImageGear=19.10

Event History

Apr 14, 2022

CVE Published

via MITRE·07:55 PM

Data Sourced

via MITRE·07:55 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID of this heap-based buffer overflow vulnerability?

The vulnerability ID is CVE-2021-21944.

What is the severity rating of CVE-2021-21944?

CVE-2021-21944 has a severity rating of 8.8 (Critical).

What is the affected software version of CVE-2021-21944?

Accusoft ImageGear 19.10 is affected by CVE-2021-21944.

How can an attacker exploit CVE-2021-21944?

An attacker can exploit CVE-2021-21944 by providing a specially-crafted file to trigger a heap buffer overflow in the TIFF parser functionality of Accusoft ImageGear 19.10.

Is there a reference link available for CVE-2021-21944?

Yes, you can find more information about CVE-2021-21944 at: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1374