#heic

0 stories this week · 0 this month · 4 in 6 months · mostly security

Stories per day · 30 days

4 stories, newest first · one card per story

Fortbridge showed authenticated WordPress HEIC uploads can exploit libheif and execute code in PHP-FPM.

GBHackersOct 5, 2026high

A critical libheif heap overflow, fixed in 1.23.3, enabled authenticated WordPress RCE via crafted HEIC uploads.

WordfenceSep 18, 2026high

Wordfence Argus disclosed a critical CVSS 9.8 flaw in libheif enabling protected-file disclosure and code execution on vulnerable server deployments.

The DecoderSep 18, 2026high

Hacktron researchers used Claude Opus 5 to exploit libheif and an SSO flaw, taking over OpenAI employee ChatGPT and Codex accounts within 72 hours.

Stories tagged #heic