CVE-2022-24457

HIGH 7.8CVE-2022-24457 · Published 09/03/2022 · updated 17/06/2026

In short

CVE-2022-24457 is a HIGH (CVSS 7.8) vulnerability affecting heif image extension (microsoft).
Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 83.0% of all vulnerabilities.
Fix: update to 1.0.43012.0 or later.

Package	Affected versions	Patched versions
heif image extension microsoft	`< 1.0.43012.0`	`1.0.43012.0`

HEIF Image Extensions Remote Code Execution Vulnerability

Running one of these products? Scan your site to see whether it exposes a vulnerable version.