CVE-2021-21947: Out-of-bounds Read

Published Apr 14, 2022

Updated

Two heap-based buffer overflow vulnerabilities exists in the JPEG-JFIF lossless Huffman image parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger these vulnerabilities.This heap-based buffer overflow takes place when the SOF3 precision is greater or equal than 9.

Affected Software

1 affected component

Accusoft ImageGear=19.10

Event History

Apr 14, 2022

CVE Published

via MITRE·07:56 PM

Data Sourced

via MITRE·07:56 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2021-21947?

CVE-2021-21947 is a vulnerability in the JPEG-JFIF lossless Huffman image parser functionality of Accusoft ImageGear 19.10 that allows for two heap-based buffer overflow vulnerabilities.

How severe is CVE-2021-21947?

CVE-2021-21947 has a severity score of 8.8, which is classified as critical.

What software is affected by CVE-2021-21947?

Accusoft ImageGear version 19.10 is affected by CVE-2021-21947.

What is the Common Weakness Enumeration (CWE) ID associated with CVE-2021-21947?

CVE-2021-21947 is associated with CWE-119, CWE-129, and CWE-122.

Where can I find more information about CVE-2021-21947?

You can find more information about CVE-2021-21947 at the following reference link: [https://talosintelligence.com/vulnerability_reports/TALOS-2021-1375]