VDB

CVE-2023-49460

CVE-2023-49460 PUBLISHED CVSS 8.800000190734863 HIGH

libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::decode_uncompressed_image.

EPSS 0.76% · 55.1th percentile

Risk Scores

CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.76%
55.1th percentile

Affected Products

VendorProductVersions
n/an/an/a, n/a
strukturlibheif1.17.5, 1.17.5

Timeline

  • Dec 7, 2023 CVE Published
  • Dec 8, 2023 EPSS Score
  • Dec 31, 2023 PoC Published
  • Jan 7, 2024 EPSS Score
  • Feb 7, 2024 EPSS Score
  • Mar 8, 2024 EPSS Score
  • Apr 8, 2024 EPSS Score
  • Apr 12, 2024 PoC Published
  • Jun 7, 2024 EPSS Score
  • Jul 8, 2024 EPSS Score
  • Aug 7, 2024 EPSS Score
  • Sep 6, 2024 EPSS Score
Open in Interactive Console →
$ Console Community · 50/day Open console ›