Vulnerability Spotlight: Out-of-bounds write vulnerabilities in Accusoft Image Gear
Summary: Cisco Talos discovered multiple out-of-bounds write vulnerabilities in Accusoft ImageGear 19.8, a document-imaging toolkit supporting more than 100 formats including DICOM, PDF and Microsoft Office. A user triggers the flaws by opening an attacker-created malicious file, leading to memory corruption; the issues are CVE-2021-21773, CVE-2021-21776 and CVE-2021-21782, and Accusoft has released an update.
What you should know: The vulnerable library sits behind image handling for over 100 formats, so a single malformed file opened by a user is enough to corrupt memory on the machine - and Talos confirmed version 19.8 is affected.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2021-21773CVE-2021-21776CVE-2021-21782
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026