Known vulnerabilities in HEIF Image Extension

Vendor: Microsoft
Software: HEIF Image Extension
Software CPE: cpe:2.3:a:microsoft:heif_image_extension:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting HEIF Image Extension HEIF Image Extension is affected by 3 known vulnerabilities: 3 high Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU147979 - Heap-based Buffer Overflow
CVE-2026-81353		 CWE-122 High
No
No
 1.2.48.0 08.09.2026 SB2026090881
#VU61172 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-24457		 CWE-94 High
No
No
 - 08.03.2022 SB2022030844
#VU48350 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-17101		 CWE-94 High
No
No
 - 10.11.2020 SB2020111075