Heif Image Extension
4 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Heif Image Extension. Use it to gauge the current risk picture and drill into individual advisories.
Heif Image Extension CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 1 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 1 |
Severity
How the 4 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical1
- High3
Latest CVEs
The 4 most recently published vulnerabilities affecting Heif Image Extension.
- CVE-2026-81353HEIF Image Extensions Remote Code Execution Vulnerability7.8
- CVE-2025-62821Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntry_GetDataSize can return success while leaving the reported data size as 0. This causes a caller to make ...9.1
- CVE-2022-24457HEIF Image Extensions Remote Code Execution Vulnerability7.8
- CVE-2020-17101HEIF Image Extensions Remote Code Execution Vulnerability7.8
Product grouping is registry-driven, with AI assist and human review. How it works