CVE-2021-32289

An issue was discovered in heif through through v3.6.2

published September 20, 2021

CVSS
—
EPSS
1%
Percentile
50.1
In the wild
Unconfirmed
What it is

An issue was discovered in heif through through v3.6.2. A NULL pointer dereference exists in the function convertByteStreamToRBSP() located in nalutil.cpp. It allows an attacker to cause Denial of Service.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00642 · 50.1th percentile
Published
2021-09-20T15:26Z
EPSS history
Timeline
  • 20 SEP 15:26Z
    An issue was discovered in heif through through v3.6.2
    cvelistv5