Approved changes feed: RSS · Atom

cpe:2.3:a:accusoft:imagegear:19.10:*:*:*:*:*:*:*

part: a version: 19.10 update: *

VendorAccusoft (b25b8d97-741d-5049-bd84-887490ec728d)
ProductImagegear (09c725a0-466e-50db-9039-e5e3b9499337)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-23400 vulnerable 2026-06-08 05:40:57.047362 Details available
HIGH (7.1)
A stack-based buffer overflow vulnerability exists in the IGXMPXMLParser::parseDelimiter functionality of Accusoft ImageGear 19.10. A specially-crafted PSD file can overflow a stack buffer, which could either lead to denial of service or, depending on the application, to an information leak. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2022-05-03T16:05:21.667Z
Updated: 2025-04-15T19:04:33.415Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22137 vulnerable 2026-06-08 05:40:06.041406 Details available
CRITICAL (9.8)
A memory corruption vulnerability exists in the ioca_mys_rgb_allocate functionality of Accusoft ImageGear 19.10. A specially-crafted malformed file can lead to an arbitrary free. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2022-05-03T16:05:10.182Z
Updated: 2025-04-15T19:04:40.772Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40398 vulnerable 2026-06-08 05:35:17.915703 Details available
HIGH (8.1)
An out-of-bounds write vulnerability exists in the parse_raster_data functionality of Accusoft ImageGear 19.10. A specially-crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2022-04-14T19:56:11.134Z
Updated: 2025-04-15T19:07:54.102Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21949 vulnerable 2026-06-08 05:29:59.140957 Details available
CRITICAL (9.8)
An improper array index validation vulnerability exists in the JPEG-JFIF Scan header parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to an out-of-bounds write and potential code exectuion. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2022-04-14T19:56:03.853Z
Updated: 2025-04-15T19:08:27.417Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21947 vulnerable 2026-06-08 05:29:59.134916 Details available
CRITICAL (9.8)
Two heap-based buffer overflow vulnerabilities exists in the JPEG-JFIF lossless Huffman image parser functionality of Accusoft ImageGear 19.10. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger these vulnerabilities.This heap-based buffer overflow takes place when the `SOF3` precision is greater or equal than 9.
Published: 2022-04-14T19:56:00.108Z
Updated: 2025-04-15T19:08:41.846Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21946 vulnerable 2026-06-08 05:29:59.134412 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21945 vulnerable 2026-06-08 05:29:59.133882 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21944 vulnerable 2026-06-08 05:29:59.133446 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21943 vulnerable 2026-06-08 05:29:59.132686 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21942 vulnerable 2026-06-08 05:29:59.132097 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21939 vulnerable 2026-06-08 05:29:59.117763 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21938 vulnerable 2026-06-08 05:29:59.117235 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21914 vulnerable 2026-06-08 05:29:59.105317 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.