Tag: GHSA-g89c-p67h-r497

Critical CVEs

Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE

Vercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both enabling unauthenticated remote code execution (RCE). The…

AVIF B0RI CVE-2026-58231 CVE-2026-75604

August 27, 2026

Critical CVEs

GHSA-g89c-p67h-r497: libheif Heap Buffer Overflow in Image Scaling

A heap buffer overflow in libheif's image scaling code (all versions through v1.23.1) allows remote code execution when processing crafted AVIF files.…

AVIF GHSA-g89c-p67h-r497 heap buffer overflow libheif

August 27, 2026