libheif Heap Buffer Overflow Vulnerability (GHSA-g89c-p67h-r497)
libheif versions through v1.23.1 contain a critical heap buffer overflow in image scaling code, exploitable via crafted AVIF files. The flaw can…
Tag: libheif
sharp Image Processing Library Affected by libheif Vulnerability
Next.js uses the sharp image processing package, which relies on libheif for AVIF parsing. The critical libheif heap buffer overflow can be…
Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE
Vercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both enabling unauthenticated remote code execution (RCE). The…
GHSA-2xp9-vwfh-vxw4: Next.js AVIF Image Processing Heap Buffer Overflow
A critical heap buffer overflow in libheif (CVSS v4 9.5) exploited via crafted AVIF images leads to remote code execution in Next.js…
GHSA-g89c-p67h-r497: libheif Heap Buffer Overflow in Image Scaling
A heap buffer overflow in libheif's image scaling code (all versions through v1.23.1) allows remote code execution when processing crafted AVIF files.…