Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior

Críticas / altas1452▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior

58 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2020-23109	Modificada	Alta (8.1)	1.3%	—	Struktur Libheif	3/11/2021	17/6/2026	Buffer overflow vulnerability in function convert_colorspace in heif_colorconversion.cc in libheif v1.6.2, allows attackers to cause a denial of service and disclose sensitive information, via a crafted HEIF file.
CVE-2021-32289	Modificada	Media (5.5)	0.64%	—	Nokia Heif	20/9/2021	17/6/2026	An issue was discovered in heif through through v3.6.2. A NULL pointer dereference exists in the function convertByteStreamToRBSP() located in nalutil.cpp. It allows an attacker to cause Denial of Service.
CVE-2021-32288	Modificada	Alta (7.8)	1.1%	—	Nokia Heif	20/9/2021	17/6/2026	An issue was discovered in heif through v3.6.2. A global-buffer-overflow exists in the function HevcDecoderConfigurationRecord::getPicHeight() located in hevcdecoderconfigrecord.cpp. It allows an attacker to cause code Execution.
CVE-2021-32287	Modificada	Alta (7.8)	1.1%	—	Nokia Heif	20/9/2021	17/6/2026	An issue was discovered in heif through v3.6.2. A global-buffer-overflow exists in the function HevcDecoderConfigurationRecord::getPicWidth() located in hevcdecoderconfigrecord.cpp. It allows an attacker to cause code Execution.
CVE-2020-19499	Modificada	Alta (8.8)	1.4%	—	Struktur Libheif	21/7/2021	17/6/2026	An issue was discovered in heif::Box_iref::get_references in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impact due to an invalid memory read.
CVE-2020-19498	Modificada	Alta (8.8)	1.4%	—	Struktur Libheif	21/7/2021	17/6/2026	Floating point exception in function Fraction in libheif 1.4.0, allows attackers to cause a Denial of Service or possibly other unspecified impacts.
CVE-2020-17101	Modificada	Alta (7.8)	0.95%	—	Microsoft Heif Image Extension	11/11/2020	17/6/2026	HEIF Image Extensions Remote Code Execution Vulnerability
CVE-2019-11471	Modificada	Alta (8.8)	1.8%	—	Struktur Libheif	23/4/2019	17/6/2026	libheif 1.4.0 has a use-after-free in heif::HeifContext::Image::set_alpha_channel in heif_context.h because heif_context.cc mishandles references to non-existing alpha images.