CVE-2020-23109

2021-11-0317:15:08

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.1%

JSON

Buffer overflow vulnerability in function convert_colorspace in heif_colorconversion.cc in libheif v1.6.2, allows attackers to cause a denial of service and disclose sensitive information, via a crafted HEIF file.

CPENameOperatorVersion
libheifeq1.5.1
libheifeq1.3.0
libheifeq1.3.2
libheifeq1.6.1
libheifeq1.5.0
libheifeq1.6.2
libheifeq1.1.0
libheifeq1.2.0
libheifeq1.0.0
libheifeq1.6.0