Sign in

7.8 High

CVE-2022-24457 HEIF Image Extensions Remote Code Execution Vulnerability

Description

HEIF Image Extensions Remote Code Execution Vulnerability

Affected products and versions

Product	Affected versions	Fixed in
HEIF Image Extension 1.0	1.0.0.0 → < 1.0.43012.0	1.0.43012.0

The 3 CVEs of HEIF Image Extension →

CVE-2026-81353 Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally 7.8 High CVE-2020-17101 HEIF Image Extensions Remote Code Execution Vulnerability 7.8 High

Do you use HEIF Image Extension?

Track this CVE Watch HEIF Image Extension Check my SBOMs

www.cveye.io/en/cve/CVE-2022-24457

Timeline

Published March 9, 2022
Last modified May 27, 2026

References

HEIF Image Extensions Remote Code Execution Vulnerability msrc.microsoft.com

Track this CVE