SecurityPrimary topic: SecurityAlso: Audio, Video & Images
Reproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainers
Crest summary (AI-written):Hacktron reported a remote code execution flaw in Next.js image optimization, but the vulnerable code was traced upstream to libheif, an AVIF decoder used by Next.js, ImageMagick, WordPress and sharp.
Companies: HacktronImageMagickNext.jsVercelWordPress