Back to Database
Status published
Critical
CVE-2021-21944
Two heap-based buffer overflow vulnerabilities exist in the TIFF parser...
Vulnerability Description
Two heap-based buffer overflow vulnerabilities exist in the TIFF parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger these vulnerabilities.This heap-based buffer oveflow takes place trying to copy the first 12 bits from local variable.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-21944
Credits & Attribution
No credits recorded in the NVD database.
More from Accusoft
View All →CVE-2023-40163
An out-of-bounds write vulnerability exists in the allocate_buffer_for_jpeg_decoding functionality of...
Critical
9.8
CVE-2023-39453
A use-after-free vulnerability exists in the tif_parse_sub_IFD functionality of Accusoft...
Critical
9.8
CVE-2023-35002
A heap-based buffer overflow vulnerability exists in the pictwread functionality...
Critical
9.8
CVE-2023-32653
An out-of-bounds write vulnerability exists in the dcm_pixel_data_decode functionality of...
Critical
9.8
CVE-2023-32614
A heap-based buffer overflow vulnerability exists in the create_png_object functionality...
High
7
Affected Vendor
Accusoft
View all reports →Affected Software
ImageGear
Vulnerable Versions:
19.10
Timeline
Official Publish:
April 14th, 2022
Last Modified:
April 15th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H