Security Advisory

CVE-2021-21947

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-04-14 19:56:00
Last updated 2025-04-15 19:08:41
Assigner talos
CVSS score 9.8
State PUBLISHED

Description

Two heap-based buffer overflow vulnerabilities exists in the JPEG-JFIF lossless Huffman image parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger these vulnerabilities.This heap-based buffer overflow takes place when the `SOF3` precision is greater or equal than 9.