CVE-2021-21794

—

CVSS 3.1

7.8 high

EPSS

<1%p50

Published

Jul 8, 2021 (Jul 8, 2021)

Modified

Jun 17, 2026

Description

An out-of-bounds write vulnerability exists in the TIF bits_per_sample processing functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.

Vendors: accusoft
Products: imagegear
Weakness: CWE-119, CWE-787
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news2 stories

Threat Source newsletter (June 3, 2021)

Cisco TalosJun 3, 18:00 UTC · Jun 3, 2021Ransomware CVE-2021-21793 CVE-2021-21794 CVE-2021-21824

Vulnerability Spotlight: Multiple vulnerabilities in Accusoft ImageGear

Cisco TalosJun 1, 17:11 UTC · Jun 1, 2021Vulnerability in the wildCVE-2021-21793 CVE-2021-21794 CVE-2021-21824+5 CVEs