CVE-2020-19499 in libheif

Sumário

de MITRE • 22/07/2021

An issue was discovered in heif::Box_iref::get_references in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impact due to an invalid memory read.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservar: 13/08/2020
• Divulgação: 22/07/2021
• Moderação: aceite
• Entrada: VDB-179330
• CPE: pronto
• CWE: CWE-119 (confirmado)
• CVSS: 5.5 (VulDB)
• EPSS: 0.00371
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-19499
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-19499
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-19499/