CVE-2020-23109

PoC —

CVSS 3.1

8.1 high

EPSS

1%p70

Published

Nov 3, 2021 (Nov 3, 2021)

Modified

Jun 17, 2026

Description

Buffer overflow vulnerability in function convert_colorspace in heif_colorconversion.cc in libheif v1.6.2, allows attackers to cause a denial of service and disclose sensitive information, via a crafted HEIF file.

Vendors: struktur
Products: libheif
Weakness: CWE-120
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.