Vulnerability Spotlight: Out-of-bounds write vulnerabilities in Accusoft ImageGear

Emmanuel Tacheau of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered multiple out-of-bounds write vulnerabilities in Accusoft ImageGear that an adversary could exploit to corrupt memory on the targeted machine. The ImageGear library is a... This i...

Accusoft ImageGear out-of-bounds write vulnerability (CNVD-2021-25373)

Accusoft ImageGear is a multi-platform, multi-language document imaging developer toolkit. An out-of-bounds write vulnerability exists in the SGI format buffer size handling feature of Accusoft ImageGear 19.8. An attacker can exploit the vulnerability by supplying a specially crafted malicious fi...

Accusoft ImageGear out-of-bounds write vulnerability (CNVD-2021-25372)

Accusoft ImageGear is a multi-platform, multi-language document imaging developer toolkit. An out-of-bounds write vulnerability exists in the TIFF header count processing functionality of Accusoft ImageGear 19.8. An attacker can exploit the vulnerability by supplying a specially crafted malicious...

Accusoft ImageGear out-of-bounds write vulnerability (CNVD-2021-25374)

Accusoft ImageGear is a multi-platform, multi-language document imaging developer toolkit. An out-of-bounds write vulnerability exists in the SGI format buffer size handling feature of Accusoft ImageGear 19.8. An attacker can exploit the vulnerability by supplying a specially crafted malicious fi...

CVE-2021-21776

An out-of-bounds write vulnerability exists in the SGI Format Buffer Size Processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-21782

An out-of-bounds write vulnerability exists in the SGI format buffer size processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-21773

An out-of-bounds write vulnerability exists in the TIFF header count-processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-21773

An out-of-bounds write vulnerability exists in the TIFF header count-processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

Design/Logic Flaw

An out-of-bounds write vulnerability exists in the TIFF header count-processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

Format string

An out-of-bounds write vulnerability exists in the SGI Format Buffer Size Processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-21782

An out-of-bounds write vulnerability exists in the SGI format buffer size processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-21776

An out-of-bounds write vulnerability exists in the SGI Format Buffer Size Processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-21773

An out-of-bounds write vulnerability exists in the TIFF header count-processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-21782

An out-of-bounds write vulnerability exists in the SGI format buffer size processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-21782

CVE-2021-21782 affects Accusoft ImageGear 19.8, specifically the SGI format buffer size processing. The root cause is an out-of-bounds memory write during SGI parsing, where the allocated size and subsequent memcpy size are taken from the SGI header, enabling memory corruption and potential code ...

CVE-2021-21776

CVE-2021-21776 describes an out-of-bounds write in Accusoft ImageGear 19.8 during SGI file parsing. The vulnerability stems from the SGI_Format_Buffer_Size_Processing path where a small destination buffer is allocated using SGI_XSIZE, but a subsequent memcpy uses a size controlled by the SGI file...

CVE-2021-21773

The CVE-2021-21773 entry concerns Accusoft ImageGear 19.8, where an out-of-bounds write vulnerability in the TIFF header count-processing functionality can lead to memory corruption when processing a specially crafted file. The issue is triggered by a malformed TIFF header processing path and is ...

PT-2021-14765

Name of the Vulnerable Software and Affected Versions Accusoft ImageGear version 19.8 Description The issue is related to an out-of-bounds write vulnerability in the SGI Format Buffer Size Processing functionality. This can be triggered by a specially crafted malformed file, leading to memory...

PT-2021-14763 · Accusoft · Accusoft Imagegear

Name of the Vulnerable Software and Affected Versions: Accusoft ImageGear version 19.8 Description: An out-of-bounds write issue exists in the TIFF header count-processing functionality. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to...

CVE-2021-21776: Incorrect Calculation of Buffer Size

An out-of-bounds write vulnerability exists in the SGI Format Buffer Size Processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...