CVE-2021-21944

Name of the Vulnerable Software and Affected Versions Accusoft ImageGear version 19.10

Description A heap-based buffer overflow issue exists in the TIFF parser functionality. This can be triggered by a specially-crafted file, leading to a heap buffer overflow. An attacker can exploit this by providing a malicious file. The issue occurs when trying to copy the first 12 bits from a local variable.

Recommendations For Accusoft ImageGear version 19.10, consider avoiding the use of the TIFF parser functionality until a fix is available. As a temporary workaround, restrict the handling of specially-crafted files to minimize the risk of exploitation.