One Malicious Image Can Turn Vulnerable Upload Services Into Remote Shells

Security researchers have disclosed “HEIF Heist,” a collection of image-parsing flaws that could let attackers turn vulnerable upload services into pathways for data theft, account compromise, and remote code execution. The research focuses on weaknesses in software used to decode HEIF, HEIC, and AVIF images. These modern image formats are widely... Weiterlesen