HEIF Heist: image parser RCE exploit
One image parser to pwn them all. Hacktron research into remote exploitation through production HEIF, HEIC, and AVIF image pipelines.
Summary
Hacktron’s research reveals vulnerabilities in image parsers used for HEIF, HEIC, and AVIF formats, showcasing how these can be exploited for remote code execution. This investigation highlights significant security risks in widely used image processing pipelines.
Comments (3 of ) ⌛