CVE-2021-21795

Name of the Vulnerable Software and Affected Versions Accusoft ImageGear version 19.9

Description A heap-based buffer overflow issue exists in the PSD read icc icCurve data functionality. This can be triggered by a specially crafted malformed file, leading to an integer overflow and subsequently a heap buffer overflow. An attacker can exploit this by providing a malicious file.

Recommendations For Accusoft ImageGear version 19.9, consider avoiding the use of the PSD read icc icCurve data functionality until a patch is available. As a temporary workaround, restrict the processing of malformed files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.