vulnerability

Arch Linux: Information disclosure (CVE-2020-23109)

Try Surface Command
Back to search
Severity
6
CVSS
(AV:N/AC:M/Au:N/C:P/I:N/A:P)
Published
Nov 3, 2021
Added
Jul 11, 2025
Modified
Feb 2, 2026

Description

A buffer overflow vulnerability in the function convert_colorspace in heif_colorconversion.cc in libheif allows attackers to cause a denial of service and disclose sensitive information via a crafted HEIF file.

Solution

arch-linux-upgrade-latest

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today