Total
4 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-81353 | 1 Microsoft | 1 Heif Image Extension | 2026-09-17 | N/A | 7.8 HIGH |
| Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally. | |||||
| CVE-2025-62821 | 1 Microsoft | 1 Heif Image Extension | 2026-06-30 | N/A | 9.1 CRITICAL |
| Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntry_GetDataSize can return success while leaving the reported data size as 0. This causes a caller to make a 1-byte allocation. Later, CopyPixels computes copy_size = stride * abs(roi_height) but does not check the source buffer length before a memmove call. | |||||
| CVE-2022-24457 | 1 Microsoft | 1 Heif Image Extension | 2026-06-17 | 6.8 MEDIUM | 7.8 HIGH |
| HEIF Image Extensions Remote Code Execution Vulnerability | |||||
| CVE-2020-17101 | 1 Microsoft | 1 Heif Image Extension | 2026-06-17 | 4.6 MEDIUM | 7.8 HIGH |
| HEIF Image Extensions Remote Code Execution Vulnerability | |||||