CVE-2021-26026

Name of the Vulnerable Software and Affected Versions ACDSee Professional 2021 version 14.0 1721

Description The issue is related to a User Mode Write Access Violation in the PlugInsIDE ACDStd.apl component of ACDSee Professional 2021. This violation occurs when processing a crafted BMP image, starting at the JPEGTransW+0x000000000000c7f4 location.

Recommendations For ACDSee Professional 2021 version 14.0 1721, consider avoiding the use of crafted BMP images to minimize the risk of exploitation. As a temporary workaround, restrict the use of the PlugInsIDE ACDStd.apl component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.