CVE-2025-29482
MEDIUM 6.2EPSS 0.2%
Buffer Overflow vulnerability in libheif 1.19.7 allows a local attacker to execute arbitrary code via the SAO (Sample Adaptive Offset) processing of libde265.
- CVSS v3.1 CNA
- 6.2 MEDIUM
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- 0.24% chance of exploitation in the next 30 days, 14th percentile
- Published
- 2025-04-07
- Updated
- 2025-04-09
Proof-of-concept exploits (1)
- lmarch2/poc/blob/main/libheif/libheif.md0★ · 2025-10-21