CVE-2021-21938

A heap-based buffer overflow vulnerability exists in the Palette box parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-21938

A CVE-2021-21938 issue affects Accusoft ImageGear 19.10, specifically the Palette box parser. A heap-based buffer overflow arises from an off-by-one error in computing the number of bytes to allocate for the Palette box data, causing a too-small destination buffer and a subsequent overflow during...