CVE-2021-21946

Two heap-based buffer overflow vulnerabilities exists in the JPEG-JFIF lossless Huffman image parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger these vulnerabilities.This heap-based...

CVE-2021-21946

CVE-2021-21946 affects Accusoft ImageGear 19.10’s JPEG-JFIF lossless Huffman image parser. The vulnerability arises in process_jpeg_lossless (and buffer allocation in allocate_buffer_for_jpeg_decoding) where per-component buffers are sized via a formula (standardized_width = (X_image * subsamplin...

CVE-2021-21946

Two heap-based buffer overflow vulnerabilities exists in the JPEG-JFIF lossless Huffman image parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger these vulnerabilities.This heap-based...

CVE-2021-21945

CVE-2021-21945 affects Accusoft ImageGear 19.10 TIFF parser. The issue is a heap-based buffer overflow in the image data parsing path when BitsPerSample=0x0c, with a complex write pattern that can overflow dest buffers during per-pixel reconstruction. TALOS-2021-1374 details the two failure modes...

CVE-2021-21945

Two heap-based buffer overflow vulnerabilities exist in the TIFF parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger these vulnerabilities.This heap-based buffer oveflow takes place tryi...

CVE-2021-21945

Two heap-based buffer overflow vulnerabilities exist in the TIFF parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger these vulnerabilities.This heap-based buffer oveflow takes place tryi...

CVE-2021-21944

Two heap-based buffer overflow vulnerabilities exist in the TIFF parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger these vulnerabilities.This heap-based buffer oveflow takes place tryi...

CVE-2021-21944

Two heap-based buffer overflow vulnerabilities exist in the TIFF parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger these vulnerabilities.This heap-based buffer oveflow takes place tryi...

CVE-2021-21944

CVE-2021-21944 (and related CVE-2021-21945) describe heap-based buffer overflow issues in the TIFF parser of Accusoft ImageGear 19.10. TALOS details show the vulnerability resides in the TIFF parsing path (FUN_10074d50) when BitsPerSample is 0xC, with a writing pattern that can exceed dest_buff b...

CVE-2021-21943

A heap-based buffer overflow vulnerability exists in the XWD parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-21943

Accusoft ImageGear 19.10 is affected via a heap-based buffer overflow in the XWD parser (xwdread_pixmapformat_0_or_1). A malformed XWD file can cause a write past a dst_buff allocated using a size derived from PixmapWidth, without validating against BytesPerLine, enabling potential code execution...

CVE-2021-21943

A heap-based buffer overflow vulnerability exists in the XWD parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-21942

The CVE-2021-21942 entry concerns Accusoft ImageGear 19.10 and the TIFF YCbCr image parser. The root cause is a missing size check in the TIFF_YCbCr_to_RGB conversion when handling YCbCrSubsampling, combined with how buffers are allocated for dst_ptr across YC bCr horizontal subsampling. This can...

CVE-2021-21942

An out-of-bounds write vulnerability exists in the TIFF YCbCr image parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-21942

An out-of-bounds write vulnerability exists in the TIFF YCbCr image parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-21939

A heap-based buffer overflow vulnerability exists in the XWD parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-21939

Summary of CVE-2021-21939 (Accusoft ImageGear XWD parser) : The heap-based buffer overflow exists in the XWD parser of ImageGear 19.10. A specially crafted XWD file can trigger the overflow during bitmap row processing due to a missing size check in raster size computation and a mismatch between ...

CVE-2021-21939

A heap-based buffer overflow vulnerability exists in the XWD parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-21938

A CVE-2021-21938 issue affects Accusoft ImageGear 19.10, specifically the Palette box parser. A heap-based buffer overflow arises from an off-by-one error in computing the number of bytes to allocate for the Palette box data, causing a too-small destination buffer and a subsequent overflow during...

CVE-2021-21938

A heap-based buffer overflow vulnerability exists in the Palette box parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...