high7.8
CVE-2021-32288
An issue was discovered in heif through v3.6.2.
Impact
An issue was discovered in heif through v3.6.2. A global-buffer-overflow exists in the function HevcDecoderConfigurationRecord::getPicHeight() located in hevcdecoderconfigrecord.cpp. It allows an attacker to cause code Execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nokia | Heif | through 3.6.2 |