CVE-2021-29112: Esri Arcreader

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

An out-of-bounds read vulnerability exists when parsing a specially crafted file in Esri ArcReader 10.8.1 (and earlier) which allow an unauthenticated attacker to induce an information disclosure issue in the context of the current user.

Affected products

• Esri Arcreader: up to and including 10.8.1

Published 2022-08-12. Last modified 2026-06-17.