CVE-2023-49463

Name of the Vulnerable Software and Affected Versions libheif version 1.17.5

Description The issue is related to a segmentation error in the find exif tag() function of the libheif decoder and encoder for file formats. Exploitation of this issue could allow a remote attacker to impact the confidentiality, integrity, and availability of protected information. The vulnerability is caused by a segmentation violation via the find exif tag() function at /libheif/exif.cc.

Recommendations For libheif version 1.17.5, as a temporary workaround, consider disabling the find exif tag() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.