CVE-2024-48514

php-heic-to-jpg = 1.0.5 is vulnerable to code injection fixed in 1.0.6. An attacker who can upload heic images is able to execute code on the remote server via the file name. As a result, the CIA is no longer guaranteed. This affects php-heic-to-jpg 1.0.5 and below...

Remote Code Execution

php-heic-to-jpg is vulnerable to Remote Code Execution. The vulnerability is due to improper handling of HEIC image uploads, allowing an attacker to execute code on the remote server via the image file name...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the file name. An attacker who can upload heic images is able to execute code on the remote server. Remediation Upgrade maestroerror/php-heic-to-jpg to version 1.0.5 or higher. References - GitHub Commit -...

DLL Hijacking Vulnerability in HEIC Image Converter (Windows Client)

HEIC Image Converter is a heic format conversion software that focuses on heic format conversion. HEIC Image Converter Windows Client suffers from a DLL hijacking vulnerability, which can be exploited by attackers to gain server control privileges...

Lightning Apple HEIC Image Converter suffers from dll hijacking vulnerability

Lightning Apple HEIC Picture Converter is the picture multimedia software of Jiangxia Technology. Lightning Apple HEIC Image Converter has a dll hijacking vulnerability that can be exploited by attackers to execute arbitrary code...