CVE-2021-21944

CVE-2021-21944 describes two heap-based buffer overflow vulnerabilities within the TIFF parser of Accusoft ImageGear 19.10. An attacker can trigger these by providing a specially crafted malicious file, leading to a heap buffer overflow when attempting to copy data from a local variable. This vulnerability carries a high CVSS score of 8.8, indicating it can be exploited over a network with low attack complexity, potentially leading to high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation, no public exploit code, and it's not listed in the KEV catalog, the vulnerability has garnered significant community discussion with 10 mentions, suggesting awareness among security researchers.