VULNERABILITY INTELLIGENCE

CVE-2020-23109

CVSS score8.1 HIGH

EPSS probability0.80%

CISA KEVNot currently listed

Published2021-11-03

Last modified2026-06-17

Description

Buffer overflow vulnerability in function convert_colorspace in heif_colorconversion.cc in libheif v1.6.2, allows attackers to cause a denial of service and disclose sensitive information, via a crafted HEIF file.