CVE-2021-21794

CVE-2021-21794 affects Accusoft ImageGear 19.9. The flaw is an out-of-bounds write in the TIF bits_per_sample processing path, caused by an unsafe GetCopyBufferAllocatedWithPixpos-derived pointer, which can allow a crafted TIF file to trigger a memory overwrite via wrapper_memcpy. TALOS documents...