In HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
References
Configurations
No configuration.
History
28 Jan 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.7 |
| CWE | CWE-125 CWE-190 |
28 Jan 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-01-28 17:15
Updated : 2025-01-28 20:15
NVD link : CVE-2017-13318
Mitre link : CVE-2017-13318
CVE.ORG link : CVE-2017-13318
JSON object : View
Products Affected
No product.