CVE-2025-62821: n/a
Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntry_GetDataSize can return success while leaving the reported data size as 0. This causes a caller to make a 1-byte allocation. Later, CopyPixels computes copy_size = stride * abs(roi_height) but does not check the source buffer length before a memmove call.
AI Analysis
Technical Summary
CVE-2025-62821 is an out-of-bounds read vulnerability in Microsoft HEIF Image Extensions 1.2.22.0. The function CHEIFItemInfoEntry_GetDataSize can return success while reporting a data size of zero, causing the caller to allocate only one byte. Later, the CopyPixels function calculates a copy size based on stride and region of interest height but does not verify that the source buffer length is sufficient before performing a memmove operation. This can lead to reading beyond the allocated buffer, potentially causing a crash or exposure of memory contents.
Potential Impact
Successful exploitation can result in a critical impact on confidentiality and availability. An attacker can cause out-of-bounds reads leading to potential memory disclosure or application crashes. The vulnerability is exploitable remotely without privileges or user interaction, increasing its risk.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented at this time.
CVE-2025-62821: n/a
Description
Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntry_GetDataSize can return success while leaving the reported data size as 0. This causes a caller to make a 1-byte allocation. Later, CopyPixels computes copy_size = stride * abs(roi_height) but does not check the source buffer length before a memmove call.
CVSS v3.1
Score 9.1critical
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2025-62821 is an out-of-bounds read vulnerability in Microsoft HEIF Image Extensions 1.2.22.0. The function CHEIFItemInfoEntry_GetDataSize can return success while reporting a data size of zero, causing the caller to allocate only one byte. Later, the CopyPixels function calculates a copy size based on stride and region of interest height but does not verify that the source buffer length is sufficient before performing a memmove operation. This can lead to reading beyond the allocated buffer, potentially causing a crash or exposure of memory contents.
Potential Impact
Successful exploitation can result in a critical impact on confidentiality and availability. An attacker can cause out-of-bounds reads leading to potential memory disclosure or application crashes. The vulnerability is exploitable remotely without privileges or user interaction, increasing its risk.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented at this time.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mitre
- Date Reserved
- 2025-10-23T00:00:00.000Z
- Cvss Version
- null
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a354cbff198dc38c1587381
Added to database: 06/19/2026, 14:05:51 UTC
Last enriched: 06/26/2026, 15:13:18 UTC
Last updated: 08/02/2026, 07:17:55 UTC
Views: 61
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.