Lucene search
China National Vulnerability DatabaseCNVD-2021-99291HistorySep 23, 2021 - 12:00 a.m.
HEIF Global Buffer Overflow Vulnerability (CNVD-2021-99291)
2021-09-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
0.001 Low
EPSS
Percentile
37.0%
HEIF refers to High Efficiency Image File Format, a file format for single images or image sequences. hevcDecoderConfigurationRecord::getPicWidth() function in hevcdecoderconfigrecord.cpp in HEIF 3.6.2 and earlier versions has global buffer overflow vulnerability. An attacker can exploit this vulnerability to execute code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nokia technologies heif | le | 3.6.2 |
Related
cvelist
cvelist
CVE-2021-32287
2021-09-20 15:26:44
cve
cve
CVE-2021-32287
2021-09-20 16:15:10
nvd
nvd
CVE-2021-32287
2021-09-20 16:15:10
prion
prion
Buffer overflow
2021-09-20 16:15:00
osv
osv
CVE-2021-32287
2021-09-20 16:15:10