CVE-2022-24457

Technical details about CVE-2022-24457 are not publicly provided in the connected documents. No affected versions, exploitation details, or fixes are disclosed here. Monitor for updates from official advisories and vendors.

CVE-2020-17101

CVE-2020-17101 is a Windows HEIF Image Extensions remote code execution vulnerability. The NVD entry assigns CVSSv3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (base 7.8) with local attack vector, low complexity, no user interaction, and high impact on confidentiality, integrity, and availability. The...

CVE-2026-81353

A heap-based buffer overflow in the HEIF Image Extensions component of the Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally . The vulnerability scores CVSS 7.8 (High) with a local attack vector, low complexity, no required privileges, but user interaction i...

CVE-2025-62821

Microsoft HEIF Image Extensions (version 1.2.22.0) contains an out-of-bounds read vulnerability within the msheif_store.dll module. The root cause is that CHEIFItemInfoEntry_GetDataSize can return success while leaving the reported data size at 0, leading a caller to allocate only a 1-byte source...