HEVC Video Extensions Remote Code Execution Vulnerability
Impact
Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
Source excerpt · microsoftAffected packages
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
Microsoft · HEVC Video Extensions
| Version / range | Source status |
|---|---|
| 1.0.0 to before 2.4.87.0 | affected |
Microsoft · HEVC Video Extensions for Licensed Applications
| Version / range | Source status |
|---|---|
| 2.0.0.0 to before 2.4.85.0 | affected |
Microsoft · HEVC Video Extensions from Device Manufacturer
Platforms: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for ARM64-based Systems, Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2022 (Server Core installation), Windows Server 2025, Windows Server 2025 (Server Core installation)
| Version / range | Source status |
|---|---|
| 2.0.0.0 to before 2.5.25.0 | affected |
Original source description
Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.