CVE-2021-26026

HIGH

ACDSee Professional 2021 14.0 1721 - User Mode Write Access Violation via Crafted BMP Image

Title source: llm

Description

PlugIns\IDE_ACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDE_ACDStd!JPEGTransW+0x000000000000c7f4 via a crafted BMP image.

References (1)

Core 1

Core References

Third Party Advisory x_refsource_misc

https://github.com/secluck/pentest/blob/main/000033.md

View Writeup ZIP pw:eip

Scores

CVSS v3 7.8

EPSS 0.0070

EPSS Percentile 48.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-863

Status published

Products (1)

acdsee/photo_studio_2021 14.0 build_1721

Published Jan 26, 2021

Tracked Since Feb 18, 2026