CVE-2023-0996

2023-02-2403:35:58

CWE-120

GovTech CSG

www.cve.org

vulnerability

libheif

image parsing

buffer overflow

memcpy call

0.002 Low

EPSS

Percentile

54.6%

JSON

There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image file to cause a buffer overflow in linear memory during a memcpy call.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "libheif",
    "repo": "https://github.com/strukturag/libheif",
    "vendor": "Struktur",
    "versions": [
      {
        "status": "affected",
        "version": "1.14.2"
      }
    ]
  }
]