23 matches found
CVE-2025-62821
Microsoft HEIF Image Extensions msheifstore.dll: CopyPixels 路径中源缓冲区分配不足导致越界读取和访问冲突（DoS） 在通过 WIC 解码特制的 HEIF 图像时，msheif 编解码器分配了一个 1 字节的源缓冲区，但随后在 CopyPixels 期间尝试从该缓冲区复制大量像素数据。复制过程使用 memmove，其大小由 stride × ROI height 计算得出，而未验证源缓冲区的实际长度。这会导致越界读取和立即的访问冲突（崩溃）。实际上，打开或预览恶意的 HEIF 文件会导致任何通过 HEIF Image...
HEIF Image Extensions Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally...
CVE-2025-62821
Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntryGetDataSize can return success while leaving the reported data size as 0. This causes a caller to make a 1-byte allocation. Later, CopyPixels computes copysize = stride absroiheight but does not check the...
PT-2026-50877
Name of the Vulnerable Software and Affected Versions Microsoft HEIF Image Extensions version 1.2.22.0 Description An out-of-bounds read occurs because the CHEIFItemInfoEntry GetDataSize function can return a success status while leaving the reported data size at 0. This leads a caller to perform...
CVE-2025-62821
Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntryGetDataSize can return success while leaving the reported data size as 0. This causes a caller to make a 1-byte allocation. Later, CopyPixels computes copysize = stride absroiheight but does not check the...
CVE-2025-62821
Microsoft HEIF Image Extensions (version 1.2.22.0) contains an out-of-bounds read vulnerability within the msheif_store.dll module. The root cause is that CHEIFItemInfoEntry_GetDataSize can return success while leaving the reported data size at 0, leading a caller to allocate only a 1-byte source...
CVE-2025-62821
Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntryGetDataSize can return success while leaving the reported data size as 0. This causes a caller to make a 1-byte allocation. Later, CopyPixels computes copysize = stride absroiheight but does not check the...
CVE-2025-62821: Undefined Security Weakness
Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntryGetDataSize can return success while leaving the reported data size as 0. This causes a caller to make a 1-byte allocation. Later, CopyPixels computes copysize = stride absroiheight but does not check the...
CVE-2025-62821
Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntryGetDataSize can return success while leaving the reported data size as 0. This causes a caller to make a 1-byte allocation. Later, CopyPixels computes copysize = stride absroiheight but does not check the...
EUVD-2020-9056
Malware in sbrugna...
CVE-2022-24457
HEIF Image Extensions Remote Code Execution Vulnerability...
CVE-2022-24457
HEIF Image Extensions Remote Code Execution Vulnerability...
Remote code execution
HEIF Image Extensions Remote Code Execution Vulnerability...
CVE-2022-24457 HEIF Image Extensions Remote Code Execution Vulnerability
...
CVE-2022-24457 HEIF Image Extensions Remote Code Execution Vulnerability
...
CVE-2022-24457: Out-of-bounds Write
HEIF Image Extensions Remote Code Execution Vulnerability...
HEIF Image Extensions Remote Code Execution Vulnerability
...
Microsoft Windows HEIF Image Extensions RCE (March 2022)
The Windows HEIF Image Extension app installed on the remote host is affected by a remote code execution vulnerability. An attacker who successfully exploited the vulnerability could execute arbitrary code. Exploitation of the vulnerability requires that a program process a specially crafted file...