heif_image_extension vulnerabilities
CVEs whose affected-version data names the heif_image_extension package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-81353High· 7.8Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.
▾ Twilightmicrosoft · heif_image_extensionEPSS 0.47%via NVD
CVE-2025-62821Critical· 9.1PoCMicrosoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntry_GetDataSize can return success while leaving the reported data size as 0
Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntry_GetDataSize can return success while leaving the reported data size as 0. This causes a caller to make a 1-byte allocation. Later, CopyPixels c…
▾ Abyssalmicrosoft · heif_image_extensionEPSS 1.1%via NVD