CVE-2021-21795

CVE-2021-21795 is a critical heap-based buffer overflow vulnerability in Accusoft ImageGear 19.9, specifically within its PSD read_icc_icCurve_data functionality. This flaw allows an unauthenticated attacker to achieve remote code execution by providing a specially crafted, malicious file, leading to an integer overflow and subsequent heap buffer overflow. With a CVSS score of 9.8, this vulnerability is highly severe, posing a significant risk of complete compromise (confidentiality, integrity, and availability). While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered notable community discussion, indicating awareness among security researchers.