CyberRota Analysis
AI-GeneratedWordPress installations using versions of libheif prior to 1.22.0 are vulnerable to a memory leak that exposes sensitive process heap data through decoded images. This flaw allows attackers to upload malicious AVIF/HEIC files, potentially revealing critical information such as library function pointers, which can undermine Address Space Layout Randomization (ASLR) and lead to further exploitation. Organizations utilizing affected versions should prioritize updating to version 1.22.0 to mitigate the risk of data leakage and local attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, two bugs in libheif chain to leak process heap memory as visible pixel values in decoded grid images. An attacker who uploads a crafted AVIF/HEIC file to any server-side image processor (WordPress, Sharp/libvips, ImageMagick, etc.) can recover heap data - including library function pointers sufficient to defeat ASLR, or any other secret - from the publicly-downloadable transcoded JPEG/PNG/WebP output. Local attack vectors are also possible. Version 1.22.0 fixes the issue.
Related CVEs
Other vulnerabilities affecting the same vendor(s)