Veille CVE

Recherche « Microsoft HEIF Image Extension »

2 CVE

Critique 1 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft HEIF Image Extension » ✕
  1. CVE-2026-81353 7.8 Élevée

    Microsoft HEIF Image Extension

    Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.

  2. CVE-2025-62821 9.1 Critique

    Microsoft heif image extension

    Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntry_GetDataSize can return success while leaving the reported data size as 0. This causes a caller to make a 1-byte allocation. Later, CopyPixels computes copy_size = stride * abs(roi_height) but does not check the source buffer length before a memmove call.