Heap overflow

A heap-based buffer overflow vulnerability exists in the PSD readiccicCurvedata functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to an integer overflow that, in turn, leads to a heap buffer overflow. An attacker can provide a malicious file to trigger this...

Heap overflow

A memory corruption vulnerability exists in the PNG pngpaletteprocess functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide malicious inputs to trigger this vulnerability...

CVE-2021-21795

The CVE-2021-21795 issue affects Accusoft ImageGear 19.9, specifically the PSD read_icc_icCurve_data function. A misparsed PSD tag counts value (curve_data->count) is read from the file; when count is large (e.g., 0x80000001), the code allocates buffer_for_curves_values using count <

CVE-2021-21795

A heap-based buffer overflow vulnerability exists in the PSD readiccicCurvedata functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to an integer overflow that, in turn, leads to a heap buffer overflow. An attacker can provide a malicious file to trigger this...

CVE-2021-21808

CVE-2021-21808 affects Accusoft ImageGear 19.9. A memory corruption arises in the PNG png_palette_process path used for 1-pixel wide palettes (bit_depth 2) with color type 3. The root cause is an out-of-bounds write into a 1-byte buffer (raster_size_buffer) during png_process_colortype/png_palett...

CVE-2021-21808

A memory corruption vulnerability exists in the PNG pngpaletteprocess functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide malicious inputs to trigger this vulnerability...

CVE-2021-21824

CVE-2021-21824 affects Accusoft ImageGear 19.9 and involves an out-of-bounds write in the JPG Handle_JPEG420 function, leading to memory corruption when processing malformed JPEG files. The TALOS report details a buffer/stride issue in handle_JPEG420 that can crash or potentially be exploited via...

CVE-2021-21824

An out-of-bounds write vulnerability exists in the JPG HandleJPEG420 functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-21833

An explicit vulnerability in Accusoft ImageGear 19.9 affects IP_planar_raster_unpack for TIF processing, enabling an out-of-bounds write via a malformed file. TALOS details show an improper array index validation in IP_planar_raster_unpack, with a crash/AV in igCore19d!IG_mpi_page_set when writin...

CVE-2021-21833

An improper array index validation vulnerability exists in the TIF IPplanarrasterunpack functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...

PT-2021-14803 · Accusoft · Accusoft Imagegear

Name of the Vulnerable Software and Affected Versions: Accusoft ImageGear version 19.9 Description: An issue exists in the TIF IP planar raster unpack functionality where improper array index validation can occur. This can be triggered by a specially crafted malformed file, leading to an...

Unspecified Vulnerability in Accusoft ImageGear (CNVD-2021-41083)

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. A security vulnerability exists in Accusoft ImageGear versions 19.8 and 19.9, which stems from an out-of-bounds write vulnerability in the program's JPG comp header processing functionality that can be...

Accusoft ImageGear buffer overflow vulnerability (CNVD-2021-40854)

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. ImageGear 19.9 suffers from a buffer overflow vulnerability that stems from the fact that an attacker can exploit the vulnerability by being able to supply a malicious file to trigger the vulnerability. ...

Accusoft ImageGear Input Validation Error Vulnerability (CNVD-2021-41085)

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. oft ImageGear 19.9 suffers from an input validation error vulnerability that stems from a specially crafted malformed file that could result in a stack-based buffer overflow. No detailed vulnerability...

Accusoft ImageGear Heap Buffer Overflow Vulnerability

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, U.S.A. A security vulnerability exists in Accusoft ImageGear, which could be exploited by an attacker to cause an integer overflow, and thus a heap buffer overflow, via a misformatted file that is constructed...

Accusoft ImageGear Code Execution Vulnerability

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. A security vulnerability exists in ImageGear 19.9 that originates from an out-of-bounds write in the JPG Handle JPEG420 function. An attacker can exploit the vulnerability to cause memory corruption by...

Accusoft ImageGear buffer overflow vulnerability (CNVD-2021-40761)

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. A security vulnerability exists in ImageGear 19.9, which originates from a buffer overflow in the PDF process font function where a stack exists. An attacker can exploit the vulnerability to cause code...

Vulnerability Spotlight: Multiple vulnerabilities in Accusoft ImageGear

Emmanuel Tacheau of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered multiple vulnerabilities in Accusoft ImageGear. The ImageGear library is a document-imaging developer toolkit that allows users to create, edit, annotate and convert various...

Accusoft ImageGear 缓冲区错误漏洞

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, U.S.A. A security vulnerability exists in Accusoft ImageGear, which could be exploited by an attacker to cause an integer overflow, and thus a heap buffer overflow, via a misformatted file that is constructed...

Accusoft ImageGear 缓冲区错误漏洞

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, U.S. A memory corruption vulnerability exists in the PNG pngpaletteprocess function in Accusoft ImageGear version 19.9. An attacker can exploit the vulnerability to cause a heap buffer overflow via specially...