Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-06517
HistoryJul 22, 2021 - 12:00 a.m.

libheif Denial of Service Vulnerability (CNVD-2022-06517)

2021-07-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
libheif
iso/iec 23008-12:2017
decoder
encoder
version 1.4.0
denial-of-service vulnerability
floating-point exception
fraction function
attacker
exploitation

EPSS

0.002

Percentile

58.9%

libheif is an ISO/IEC 23008-12:2017 HEIF file format decoder and encoder. libheif version 1.4.0 suffers from a denial-of-service vulnerability. The vulnerability stems from a floating-point exception in the Fraction function. An attacker could exploit this vulnerability to cause a denial of service.

EPSS

0.002

Percentile

58.9%