CVE-2021-32288

Name of the Vulnerable Software and Affected Versions: heif versions prior to 3.6.3

Description: A global buffer overflow issue exists in the HevcDecoderConfigurationRecord::getPicHeight() function, located in hevcdecoderconfigrecord.cpp. This issue allows an attacker to cause code execution.

Recommendations: For versions prior to 3.6.3, update to version 3.6.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the HevcDecoderConfigurationRecord::getPicHeight() function until a patch is available.