CVE-2023-49460

Summary

CVE-2023-49460 is a newly disclosed vulnerability affecting libheif version 1.17.5. This issue involves a segmentation violation in the UncompressedImageCodec::decode_uncompressed_image function. Maliciously crafted input data can cause the function to read or write beyond its intended memory boundaries, potentially leading to crashes or arbitrary code execution. Systems utilizing libheif and its downstream projects should promptly apply updates to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.