CVE-2021-21776

CVE-2021-21776 describes an out-of-bounds write in Accusoft ImageGear 19.8 during SGI file parsing. The vulnerability stems from the SGI_Format_Buffer_Size_Processing path where a small destination buffer is allocated using SGI_XSIZE, but a subsequent memcpy uses a size controlled by the SGI file...

CVE-2021-21776: Incorrect Calculation of Buffer Size

An out-of-bounds write vulnerability exists in the SGI Format Buffer Size Processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...