Microsoft Heif Image Extension
4 CVEs affecting Microsoft Heif Image Extension. Latest disclosed: 2026-09-08. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-62821 | Critical | 9.1 | 2026-06-19 | Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntry_GetDataSize can return success while leaving the reported data si… |
CVE-2026-81353 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally. |
CVE-2022-24457 | High | 7.8 | 2022-03-09 | HEIF Image Extensions Remote Code Execution Vulnerability |
CVE-2020-17101 | High | 7.8 | 2020-11-11 | HEIF Image Extensions Remote Code Execution Vulnerability |