CVE-2021-32289

2021-09-2016:15:10

Google

osv.dev

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.7%

JSON

An issue was discovered in heif through through v3.6.2. A NULL pointer dereference exists in the function convertByteStreamToRBSP() located in nalutil.cpp. It allows an attacker to cause Denial of Service.

CPENameOperatorVersion
heifeq3.5.0
heifeq3.2.1
heifeq3.3.0
heifeq3.3.1
heifeq3.6.0
heifeq3.6.1
heifeq3.6.2
heifeq2.0
heifeq3.2
heifeq3.4.0

Name	Operator	Version
heif	eq	3.5.0
heif	eq	3.2.1
heif	eq	3.3.0
heif	eq	3.3.1
heif	eq	3.6.0
heif	eq	3.6.1
heif	eq	3.6.2
heif	eq	2.0
heif	eq	3.2
heif	eq	3.4.0

Rows per page:

1-10 of 131

References

github.com/nokiatech/heif/issues/85