Approved changes feed: RSS · Atom

cpe:2.3:a:accusoft:imagegear:19.10:*:*:*:*:*:*:*

part: a version: 19.10 update: *

VendorAccusoft (b25b8d97-741d-5049-bd84-887490ec728d)
ProductImagegear (09c725a0-466e-50db-9039-e5e3b9499337)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-23400 vulnerable 2026-06-03 14:46:27.070286 Details available
HIGH (7.1)
A stack-based buffer overflow vulnerability exists in the IGXMPXMLParser::parseDelimiter functionality of Accusoft ImageGear 19.10. A specially-crafted PSD file can overflow a stack buffer, which could either lead to denial of service or, depending on the application, to an information leak. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2022-05-03T16:05:21.667Z
Updated: 2025-04-15T19:04:33.415Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22137 vulnerable 2026-06-03 14:46:16.820871 Details available
CRITICAL (9.8)
A memory corruption vulnerability exists in the ioca_mys_rgb_allocate functionality of Accusoft ImageGear 19.10. A specially-crafted malformed file can lead to an arbitrary free. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2022-05-03T16:05:10.182Z
Updated: 2025-04-15T19:04:40.772Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40398 vulnerable 2026-06-03 14:45:23.753062 Details available
HIGH (8.1)
An out-of-bounds write vulnerability exists in the parse_raster_data functionality of Accusoft ImageGear 19.10. A specially-crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2022-04-14T19:56:11.134Z
Updated: 2025-04-15T19:07:54.102Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21949 vulnerable 2026-06-03 14:43:51.499796 Details available
CRITICAL (9.8)
An improper array index validation vulnerability exists in the JPEG-JFIF Scan header parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to an out-of-bounds write and potential code exectuion. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2022-04-14T19:56:03.853Z
Updated: 2025-04-15T19:08:27.417Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21947 vulnerable 2026-06-03 14:43:51.489164 Details available
CRITICAL (9.8)
Two heap-based buffer overflow vulnerabilities exists in the JPEG-JFIF lossless Huffman image parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger these vulnerabilities.This heap-based buffer overflow takes place when the `SOF3` precision is greater or equal than 9.
Published: 2022-04-14T19:56:00.108Z
Updated: 2025-04-15T19:08:41.846Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21946 vulnerable 2026-06-03 14:43:51.488618 Details available
CRITICAL (9.8)
Two heap-based buffer overflow vulnerabilities exists in the JPEG-JFIF lossless Huffman image parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger these vulnerabilities.This heap-based buffer overflow takes place when the `SOF3` precision is lower than 9.
Published: 2022-04-14T19:55:58.586Z
Updated: 2025-04-15T19:08:48.828Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21945 vulnerable 2026-06-03 14:43:51.488062 Details available
CRITICAL (9.8)
Two heap-based buffer overflow vulnerabilities exist in the TIFF parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger these vulnerabilities.This heap-based buffer oveflow takes place trying to copy the second 12 bits from local variable.
Published: 2022-04-14T19:55:57.091Z
Updated: 2025-04-15T19:08:55.411Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21944 vulnerable 2026-06-03 14:43:51.487509 Details available
CRITICAL (9.8)
Two heap-based buffer overflow vulnerabilities exist in the TIFF parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger these vulnerabilities.This heap-based buffer oveflow takes place trying to copy the first 12 bits from local variable.
Published: 2022-04-14T19:55:55.745Z
Updated: 2025-04-15T19:09:02.830Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21943 vulnerable 2026-06-03 14:43:51.486951 Details available
CRITICAL (9.8)
A heap-based buffer overflow vulnerability exists in the XWD parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2022-04-14T19:55:54.290Z
Updated: 2025-04-15T19:09:10.057Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21942 vulnerable 2026-06-03 14:43:51.486376 Details available
CRITICAL (9.8)
An out-of-bounds write vulnerability exists in the TIFF YCbCr image parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2022-04-14T19:55:52.897Z
Updated: 2025-04-15T19:09:17.388Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21939 vulnerable 2026-06-03 14:43:51.481157 Details available
CRITICAL (9.8)
A heap-based buffer overflow vulnerability exists in the XWD parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2022-04-14T19:55:51.395Z
Updated: 2025-04-15T19:09:24.736Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21938 vulnerable 2026-06-03 14:43:51.480454 Details available
CRITICAL (9.8)
A heap-based buffer overflow vulnerability exists in the Palette box parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2022-04-14T19:55:49.844Z
Updated: 2025-04-15T19:09:31.870Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21914 vulnerable 2026-06-03 14:43:46.132167 Details available
CRITICAL (9.8)
A heap-based buffer overflow vulnerability exists in the DecoderStream::Append functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2022-04-14T19:55:48.206Z
Updated: 2025-04-15T19:09:40.998Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.