Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the decodegridtile process. An attacker can cause a heap out-of-bounds read by supplying a crafted image file that triggers an irot-induced tile-coordinate underflow. Remediation Upgrade libheif to version 1.23.1 o...

CVE-2021-32288

An issue was discovered in heif through v3.6.2. A global-buffer-overflow exists in the function HevcDecoderConfigurationRecord::getPicHeight located in hevcdecoderconfigrecord.cpp. It allows an attacker to cause code Execution...

Heif buffer error vulnerability

HEIF refers to High Efficiency Image File Format, a file format for single images or image sequences. hevcDecoderConfigurationRecord::getPicHeight function in hevcdecoderconfigrecord.cpp in HEIF 3.6.2 and earlier versions A global buffer overflow vulnerability exists. An attacker can exploit this...