SecurityLobstersabout 2 hours ago
Hacktron Finds HEIF Image Decoder RCE Flaws
3 min read
Hacktron disclosed HEIF Heist, a class of remote code execution and data leak flaws in libheif and libde265 image decoders used by Meta, GitHub Enterprise, Next.js and Discourse. Upgrading to libheif v1.23.2 or later is recommended.
Level
Hype check
Tap to vote and see what everyone thinks.
