Security Advisory

CVE-2023-0996

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-02-24 03:35:58
Last updated 2025-03-11 20:47:36
Assigner GovTech CSG
State PUBLISHED

Description

There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image file to cause a buffer overflow in linear memory during a memcpy call.