Heif Image Extension

heif_image_extension

Vendor: Microsoft • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-62821 1Microsoft 1Heif Image Extension Jun 30, 2026 Jun 19, 2026 N/A· v4 9.1 CRITICAL· v3 N/A· v2 Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntry_GetDataSize can return success while leaving the reported data size as 0. This causes a caller to make a 1-byte allocation. La...Show more Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntry_GetDataSize can return success while leaving the reported data size as 0. This causes a caller to make a 1-byte allocation. Later, CopyPixels computes copy_size = stride * abs(roi_height) but does not check the source buffer length before a memmove call.Show less
CVE-2022-24457 1Microsoft 1Heif Image Extension Jun 17, 2026 Mar 9, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 HEIF Image Extensions Remote Code Execution Vulnerability
CVE-2020-17101 1Microsoft 1Heif Image Extension Jun 17, 2026 Nov 11, 2020 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 HEIF Image Extensions Remote Code Execution Vulnerability