CVE-2021-32289

The CVE-2021-32289 issue affects the HEIF library (v3.6.2 and earlier) via a NULL pointer dereference in nalutil.cpp: convertByteStreamToRBSP(). This vulnerability can lead to a Denial of Service. Affected component is the HEIF implementation; no exploit details or affected product/version list b...

CVE-2021-32287

CVE-2021-32287 affects the HEIF library (up to and including v3.6.2). The issue is a global-buffer-overflow in HevcDecoderConfigurationRecord::getPicWidth() (hevcdecoderconfigrecord.cpp) that can lead to code execution. Multiple sources corroborate the same vulnerability across standard CVE datab...

CVE-2021-32288

CVE-2021-32288 affects the HEIF project up to version 3.6.2. The issue is a global-buffer-overflow in the function HevcDecoderConfigurationRecord::getPicHeight() in hevcdecoderconfigrecord.cpp, allowing an attacker to achieve code execution. The connected documents confirm the vulnerability class...