-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
The vulnerable functions were identified based on the information provided in the GitHub issue #1073 for libheif, specifically the ASAN (AddressSanitizer) output which directly implicates JpegEncoder::Encode and Encoder::GetExifMetaData in memory leaks. The commit information could not be retrieved, so the confidence is medium. The file paths are derived from the ASAN log.
Ongoing coverage of React2Shell