32 matches found
CVE-2025-62821
Microsoft HEIF Image Extensions msheifstore.dll: Source-buffer under-allocation in CopyPixels path leads to out-of-bounds read and Access Violation DoS When decoding a crafted HEIF image through WIC, the msheif codec allocates a 1-byte source buffer but later attempts to copy a very large amount ...
HEIF Image Extensions Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the decodegridtile process. An attacker can cause a heap out-of-bounds read by supplying a crafted image file that triggers an irot-induced tile-coordinate underflow. Remediation Upgrade libheif to version 1.23.1 o...
CVE-2026-47709
A flaw was found in libheif, a library for decoding and encoding HEIF High Efficiency Image File Format and AVIF AV1 Image File Format images. A local attacker could provide a specially crafted HEIF image file that, when processed, causes the application to crash due to a null pointer read. This...
PT-2026-60429
Name of the Vulnerable Software and Affected Versions libheif affected versions not specified Description A heap buffer overflow occurs in the uncompressed encoder when processing a HEIF image where the alpha plane is larger than the picture. This happens because the encoder writes past the...
CVE-2025-62821
Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntryGetDataSize can return success while leaving the reported data size as 0. This causes a caller to make a 1-byte allocation. Later, CopyPixels computes copysize = stride absroiheight but does not check the...
CVE-2025-62821
Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntryGetDataSize can return success while leaving the reported data size as 0. This causes a caller to make a 1-byte allocation. Later, CopyPixels computes copysize = stride absroiheight but does not check the...
CVE-2025-62821
Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntryGetDataSize can return success while leaving the reported data size as 0. This causes a caller to make a 1-byte allocation. Later, CopyPixels computes copysize = stride absroiheight but does not check the...
CVE-2025-62821
Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntryGetDataSize can return success while leaving the reported data size as 0. This causes a caller to make a 1-byte allocation. Later, CopyPixels computes copysize = stride absroiheight but does not check the...
PT-2026-50877
Name of the Vulnerable Software and Affected Versions Microsoft HEIF Image Extensions version 1.2.22.0 Description An out-of-bounds read occurs because the CHEIFItemInfoEntry GetDataSize function can return a success status while leaving the reported data size at 0. This leads a caller to perform...
CVE-2025-62821
CVE-2025-62821 affects Microsoft HEIF Image Extensions 1.2.22.0. The issue is an out-of-bounds read caused by CHEIFItemInfoEntry_GetDataSize returning success while reporting data size as 0, leading to a 1-byte allocation. Later, CopyPixels computes copy_size = stride * abs(roi_height) without va...
GHSA-5P2G-FCMC-QVQQ image-size: JXL and HEIF parsers allow denial of service through infinite loops
image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-valued size field in a recognized box-type. Attackers can trigger an infinite loop in the JXL or...
EUVD-2020-9056
Malware in sbrugna...
EUVD-2022-29339
Malicious code in bioql PyPI...
CVE-2025-29769 libvips has a potential heap-based buffer overflow when attempting to convert multiband TIFF input to HEIF output
libvips is a demand-driven, horizontally threaded image processing library. The heifsave operation could incorrectly determine the presence of an alpha channel in an input when it was not possible to determine the colour interpretation, known internally within libvips as "multiband". There aren't...
tifig 安全漏洞
tifig is Monostream open source a fast HEIF image converter for thumbnails. tifig v0.2.2 version has a security vulnerability , the vulnerability stems from its /asan/asannewdelete.cpp component in the new has a memory leak...
tifig 资源管理错误漏洞
tifig is a Monostream open source fast HEIF image converter for thumbnails. A security vulnerability exists in tifig version v0.2.2, which stems from a heap-release reuse of its temInfoEntry function...
CVE-2022-24457
HEIF Image Extensions Remote Code Execution Vulnerability...
