Vulnerability Spotlight: Memory corruption vulnerability in Accusoft Image Gear
Summary: Emmanuel Tacheau discovered an out-of-bounds write vulnerability in the JPG format SOF marker processing of Accusoft ImageGear 19.8, tracked as TALOS-2021-1248 and CVE-2021-21784. A specially crafted malformed file can cause memory corruption and potentially allow an attacker to execute arbitrary code on the victim machine, and Cisco Talos confirmed version 19.8.0 is affected.
What you should know: ImageGear is a document-imaging toolkit that supports more than 100 formats including DICOM, PDF and Microsoft Office, so a single malformed image file reaching a product built on it can hand an attacker code execution. Talos worked with Accusoft to resolve the issue and release an update, and published Snort rules 57162 through 57165 to detect exploitation attempts.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2021-21784
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026