Vulnerability Spotlight: Memory corruption vulnerability in Daemon Tools Pro

Summary: Piotr Bania of Cisco Talos discovered a memory corruption vulnerability, TALOS-2021-1295 (CVE-2021-21832), in Disc Soft Ltd.'s Daemon Tools Pro that triggers when a user opens an adversary-created ISO file causing an integer overflow in the application's ISO parsing. Cisco Talos worked with Disc Soft Ltd. to resolve the issue, and users are encouraged to update to Daemon Tools Pro version 8.3.0.0767, which Talos tested and confirmed could still be exploited by this vulnerability.
Key Takeaway: The fix version Talos names, 8.3.0.0767, is the same build it confirmed as exploitable, so anyone who treats that version number as the all-clear may still be running a vulnerable install.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2021-21832
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026