23 matches found
CVE-2025-62821
Microsoft HEIF Image Extensions msheifstore.dll: Source-buffer under-allocation in CopyPixels path leads to out-of-bounds read and Access Violation DoS When decoding a crafted HEIF image through WIC, the msheif codec allocates a 1-byte source buffer but later attempts to copy a very large amount ...
HEIF Image Extensions Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally...
CVE-2025-62821
Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntryGetDataSize can return success while leaving the reported data size as 0. This causes a caller to make a 1-byte allocation. Later, CopyPixels computes copysize = stride absroiheight but does not check the...
CVE-2025-62821
Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntryGetDataSize can return success while leaving the reported data size as 0. This causes a caller to make a 1-byte allocation. Later, CopyPixels computes copysize = stride absroiheight but does not check the...
CVE-2025-62821: Undefined Security Weakness
Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntryGetDataSize can return success while leaving the reported data size as 0. This causes a caller to make a 1-byte allocation. Later, CopyPixels computes copysize = stride absroiheight but does not check the...
PT-2026-50877
Name of the Vulnerable Software and Affected Versions Microsoft HEIF Image Extensions version 1.2.22.0 Description An out-of-bounds read occurs because the CHEIFItemInfoEntry GetDataSize function can return a success status while leaving the reported data size at 0. This leads a caller to perform...
CVE-2025-62821
Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntryGetDataSize can return success while leaving the reported data size as 0. This causes a caller to make a 1-byte allocation. Later, CopyPixels computes copysize = stride absroiheight but does not check the...
CVE-2025-62821
Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntryGetDataSize can return success while leaving the reported data size as 0. This causes a caller to make a 1-byte allocation. Later, CopyPixels computes copysize = stride absroiheight but does not check the...
CVE-2025-62821
Microsoft HEIF Image Extensions (version 1.2.22.0) contains an out-of-bounds read vulnerability within the msheif_store.dll module. The root cause is that CHEIFItemInfoEntry_GetDataSize can return success while leaving the reported data size at 0, leading a caller to allocate only a 1-byte source...
EUVD-2020-9056
Malware in sbrugna...
CVE-2022-24457
HEIF Image Extensions Remote Code Execution Vulnerability...
CVE-2022-24457
HEIF Image Extensions Remote Code Execution Vulnerability...
Remote code execution
HEIF Image Extensions Remote Code Execution Vulnerability...
CVE-2022-24457 HEIF Image Extensions Remote Code Execution Vulnerability
...
CVE-2022-24457 HEIF Image Extensions Remote Code Execution Vulnerability
...
CVE-2022-24457: Out-of-bounds Write
HEIF Image Extensions Remote Code Execution Vulnerability...
HEIF Image Extensions Remote Code Execution Vulnerability
...
Microsoft Windows HEIF Image Extensions RCE (March 2022)
The Windows HEIF Image Extension app installed on the remote host is affected by a remote code execution vulnerability. An attacker who successfully exploited the vulnerability could execute arbitrary code. Exploitation of the vulnerability requires that a program process a specially crafted file...