CVE-2021-21946CWE-122
Two heap-based buffer overflow vulnerabilities exists in the JPEG-JFIF lossless Huffman image parser functionality of Accusoft ImageGear 19.10
Critical · published April 14, 2022
What it is
Two heap-based buffer overflow vulnerabilities exists in the JPEG-JFIF lossless Huffman image parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger these vulnerabilities.This heap-based buffer overflow takes place when the `SOF3` precision is lower than 9.
The record
Technical detail
- CVSS v3.0
- 9.8 · CRITICAL
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.01084 · 65.0th percentile
- Weakness
- CWE-122 · Heap-based Buffer Overflow
- Published
- 2022-04-14T19:55Z
EPSS history
Timeline