CVE-2021-32288

An issue was discovered in heif through v3.6.2. A global-buffer-overflow exists in the function HevcDecoderConfigurationRecord::getPicHeight() located in hevcdecoderconfigrecord.cpp. It allows an attacker to cause code Execution.

• CWE-787

• https://github.com/nokiatech/heif/issues/87Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/nokiatech/heif/issues/87Exploit, Issue Tracking, Patch, Third Party Advisory

Published

Sep 20, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-32282An issue was discovered in gravity through 0.8.1. A NULL poi…5.5
• CVE-2021-32283An issue was discovered in gravity through 0.8.1. A NULL poi…5.5
• CVE-2021-32284An issue was discovered in gravity through 0.8.1. A NULL poi…7.8
• CVE-2021-32285An issue was discovered in gravity through 0.8.1. A NULL poi…5.5
• CVE-2021-32286An issue was discovered in hcxtools through 6.1.6. A global-…7.8
• CVE-2021-32287An issue was discovered in heif through v3.6.2. A global-buf…7.8
• CVE-2021-32289An issue was discovered in heif through through v3.6.2. A NU…5.5
• CVE-2021-3229Denial of service in ASUSWRT ASUS RT-AX3000 firmware version…7.5
• CVE-2021-32292An issue was discovered in json-c from 20200420 (post 0.14 u…9.8
• CVE-2021-32294An issue was discovered in libgig through 20200507. A heap-b…8.8
• CVE-2021-32297An issue was discovered in LIEF through 0.11.4. A heap-buffe…8.8
• CVE-2021-32298An issue was discovered in libiff through 20190123. A global…8.8