libheif Heap Buffer Overflow Vulnerability (GHSA-g89c-p67h-r497)
libheif versions through v1.23.1 contain a critical heap buffer overflow in image scaling code, exploitable via crafted AVIF files. The flaw can…
Tag: heap buffer overflow
Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE
Vercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both enabling unauthenticated remote code execution (RCE). The…
GHSA-2xp9-vwfh-vxw4: Next.js AVIF Image Processing Heap Buffer Overflow
A critical heap buffer overflow in libheif (CVSS v4 9.5) exploited via crafted AVIF images leads to remote code execution in Next.js…
GHSA-g89c-p67h-r497: libheif Heap Buffer Overflow in Image Scaling
A heap buffer overflow in libheif's image scaling code (all versions through v1.23.1) allows remote code execution when processing crafted AVIF files.…
Critical NGINX Heap Buffer Overflow CVE-2026-42533 Allows DoS and Potential RCE
F5 has patched a critical heap buffer overflow vulnerability in NGINX, tracked as CVE-2026-42533, which can crash worker processes and may allow…
CVE-2025-66199: OpenSSL TLS 1.3 Certificate Compression Heap Buffer Overflow
A low-severity vulnerability in OpenSSL's TLS 1.3 certificate compression feature allows a peer-supplied length to grow a heap buffer before validation, potentially…
CVE-2023-4863: Heap Buffer Overflow in WebP
CVE-2023-4863 is a heap buffer overflow vulnerability in the WebP image format library, which can be exploited for browser-based attacks. It was…