CVE-2021-22759

Name of the Vulnerable Software and Affected Versions IGSS Definition (Def.exe) versions 15.0.0.21140 and prior

Description A use after free issue exists due to the use of unchecked input data when a malicious CGF file is imported, potentially resulting in loss of data or remote code execution.

Recommendations For versions 15.0.0.21140 and prior, consider restricting the import of CGF files from untrusted sources until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.