Lucene search
China National Vulnerability DatabaseCNVD-2021-99291HistorySep 23, 2021 - 12:00 a.m.
HEIF Global Buffer Overflow Vulnerability (CNVD-2021-99291)
2021-09-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
heif
global buffer overflow
vulnerability
hevcdecoderconfigurationrecord
getpicwidth
execution code
image format
security issue
EPSS
0.001
Percentile
39.8%
HEIF refers to High Efficiency Image File Format, a file format for single images or image sequences. hevcDecoderConfigurationRecord::getPicWidth() function in hevcdecoderconfigrecord.cpp in HEIF 3.6.2 and earlier versions has global buffer overflow vulnerability. An attacker can exploit this vulnerability to execute code.
Related
cvelist
cvelist
CVE-2021-32287
2021-09-20 15:26:44
prion
prion
Buffer overflow
2021-09-20 16:15:00
osv
osv
CVE-2021-32287
2021-09-20 16:15:10
nvd
nvd
CVE-2021-32287
2021-09-20 16:15:10
cve
cve
CVE-2021-32287
2021-09-20 16:15:10