High · 7.8 CVE-2022-24457 EUVD-2022-29339GHSA-rf8f-5xcx-f48m

HEIF Image Extensions Remote Code Execution Vulnerability

Published Mar 9, 2022 · Updated May 27, 2026 · Assigned by microsoft

Vendor: Microsoft Product: HEIF Image Extension

Description

HEIF Image Extensions Remote Code Execution Vulnerability

Affected products

Vendor	Product	Affected	Fixed
Microsoft	HEIF Image Extension	1.0.0.0 – < 1.0.43012.0	1.0.43012.0

Advisories 1

MSRC-CVE-2022-24457 HEIF Image Extensions Remote Code Execution Vulnerability Microsoft Security Response Center · Mar 8, 2022

References

HEIF Image Extensions Remote Code Execution Vulnerability vendor-advisory