CVE-2025-62821
ANALYSIS PENDINGMicrosoft HEIF Image Extensions 1.2.22.0 - Out-of-Bounds Read via CHEIFItemInfoEntry_GetDataSize
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2025-62821. PoCs published by hyunjungg.
AI-analyzed exploit summary The repository contains a functional proof-of-concept exploit for CVE-2025-62821, demonstrating a source-buffer under-allocation vulnerability in Microsoft HEIF Image Extensions (msheif_store.dll) that leads to an out-of-bounds read and access violation (DoS). The exploit includes a crafted HEIF file and detailed technical analysis of the root cause, code flow, and suggested fixes.
Description
Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntry_GetDataSize can return success while leaving the reported data size as 0. This causes a caller to make a 1-byte allocation. Later, CopyPixels computes copy_size = stride * abs(roi_height) but does not check the source buffer length before a memmove call.
Exploits (1)
The repository contains a functional proof-of-concept exploit for CVE-2025-62821, demonstrating a source-buffer under-allocation vulnerability in Microsoft HEIF Image Extensions (msheif_store.dll) that leads to an out-of-bounds read and access violation (DoS). The exploit includes a crafted HEIF file and detailed technical analysis of the root cause, code flow, and suggested fixes.